todolist_exe.zip
- SHA256 303be7260ad8330508e98c77c51cc47c0c27a609f65b7aeff3444bf9f6062bd0
Password
infected
Overview
overview
10Static
static
10BouncyCast...to.dll
windows7-x64
1BouncyCast...to.dll
windows10-2004-x64
1BurndownExt.dll
windows7-x64
3BurndownExt.dll
windows10-2004-x64
3Calendar.DayView.dll
windows7-x64
1Calendar.DayView.dll
windows10-2004-x64
1CalendarExt.dll
windows7-x64
3CalendarExt.dll
windows10-2004-x64
3CommandHandling.dll
windows7-x64
1CommandHandling.dll
windows10-2004-x64
1ConvertRTFToHTML.exe
windows7-x64
3ConvertRTFToHTML.exe
windows10-2004-x64
3CustomComboBox.dll
windows7-x64
1CustomComboBox.dll
windows10-2004-x64
1DayViewUIE...ge.dll
windows7-x64
3DayViewUIE...ge.dll
windows10-2004-x64
3DayViewUIE...re.dll
windows7-x64
3DayViewUIE...re.dll
windows10-2004-x64
3EncryptDecrypt.dll
windows7-x64
3EncryptDecrypt.dll
windows10-2004-x64
3EvidenceBo...ge.dll
windows7-x64
3EvidenceBo...ge.dll
windows10-2004-x64
3EvidenceBo...re.dll
windows7-x64
3EvidenceBo...re.dll
windows10-2004-x64
3FMindImportExport.dll
windows7-x64
3FMindImportExport.dll
windows10-2004-x64
3FtpStorage.dll
windows7-x64
3FtpStorage.dll
windows10-2004-x64
3GPExport.dll
windows7-x64
3GPExport.dll
windows10-2004-x64
3GanttChartExt.dll
windows7-x64
3GanttChartExt.dll
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BouncyCastle.Crypto.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BouncyCastle.Crypto.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
BurndownExt.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
BurndownExt.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Calendar.DayView.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Calendar.DayView.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CalendarExt.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
CalendarExt.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
CommandHandling.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
CommandHandling.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
ConvertRTFToHTML.exe
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
ConvertRTFToHTML.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
CustomComboBox.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
CustomComboBox.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
DayViewUIExtensionBridge.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
DayViewUIExtensionBridge.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
DayViewUIExtensionCore.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
DayViewUIExtensionCore.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
EncryptDecrypt.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
EncryptDecrypt.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
EvidenceBoardUIExtensionBridge.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
EvidenceBoardUIExtensionBridge.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
EvidenceBoardUIExtensionCore.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
EvidenceBoardUIExtensionCore.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
FMindImportExport.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
FMindImportExport.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
FtpStorage.dll
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
FtpStorage.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
GPExport.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
GPExport.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
GanttChartExt.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
GanttChartExt.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target todolist_exe.zip
- Size 7.8MB
- Sample240901-vqcesswgrl
- SHA256 303be7260ad8330508e98c77c51cc47c0c27a609f65b7aeff3444bf9f6062bd0
- MD5 412020a2717d73df5663acbd84bae2f5
- SHA1 dca090f60d7c74e7a2e7e0a2514ab3d78b10db85
- SHA512 8edbf6de88ce5de662c461e31d34144a9e9349df049484fbaf13ab4df9b02b70450510490da9889cd3caafb63512de3e698eb4b8cf6d17df652d8b5db0d24d72
- SSDEEP 196608:Ks9ZQzYmJ7z4duFyNTnSiOuqqPcPIoX0WwGegTlapmNjv9AQsUa1JdHM3fdsNL:1UBoeyrOu3kPBX8GJTla4w7JdqFsNL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
http://abstractspoon.pbworks.com/f/todolist_exe.zip
Signatures
- Unsigned PE 60 IoCs
Checks for missing Authenticode signature.
resource unpack001/BouncyCastle.Crypto.dll unpack001/BurndownExt.dll unpack001/Calendar.DayView.dll unpack001/CalendarExt.dll unpack001/CommandHandling.dll unpack001/ConvertRTFToHTML.exe unpack001/CustomComboBox.dll unpack001/DayViewUIExtensionBridge.dll unpack001/DayViewUIExtensionCore.dll unpack001/EncryptDecrypt.dll unpack001/EvidenceBoardUIExtensionBridge.dll unpack001/EvidenceBoardUIExtensionCore.dll unpack001/FMindImportExport.dll unpack001/FtpStorage.dll unpack001/GPExport.dll unpack001/GanttChartExt.dll unpack001/Gma.CodeCloud.Controls.dll unpack001/HTMLContentControlBridge.dll unpack001/HTMLContentControlCore.dll unpack001/HTMLReportExporterBridge.dll unpack001/HTMLReportExporterCore.dll unpack001/HtmlAgilityPack.dll unpack001/ImageHelper.dll unpack001/KanbanBoard.dll unpack001/LinkLabelEx.dll unpack001/MDContentControlBridge.dll unpack001/MDContentControlCore.dll unpack001/MLOImport.dll unpack001/MSDN.HtmlEditorControl.dll unpack001/Markdig.dll unpack001/Microsoft.VisualStudio.OLE.Interop.dll unpack001/MindMapUIExtensionBridge.dll unpack001/MindMapUIExtensionCore.dll unpack001/MySpellCheck.dll unpack001/PDFExporterBridge.dll unpack001/PDFExporterCore.dll unpack001/PlainTextImport.dll unpack001/PluginHelpers.dll unpack001/RTFContentCtrl.dll unpack001/RadialTree.dll unpack001/RichEditExtensions.dll unpack001/ScrollHelper.dll unpack001/SpreadsheetContentControlBridge.dll unpack001/SpreadsheetContentControlCore.dll unpack001/TDLTransEdit.exe unpack001/TDLUninstall.exe unpack001/TDLUpdate.exe unpack001/ToDoList.exe unpack001/ToolStripToolTip.dll unpack001/TransText.dll unpack001/TreeViewHelper.dll unpack001/UIComponents.dll unpack001/WebBrowserEx.dll unpack001/WordCloudUIExtensionBridge.dll unpack001/WordCloudUIExtensionCore.dll unpack001/WorkloadExt.dll unpack001/iCalImportExport.dll unpack001/iTextSharp.dll unpack001/unvell.ReoGrid.dll unpack001/unvell.ReoGridEditorControl.dll
File Explorer
-
todolist_exe.zip.zip 7.8MB
-
BouncyCastle.Crypto.dll.dll 2.5MB
-
BurndownExt.dll.dll 372KB
-
Calendar.DayView.dll.dll 52KB
-
CalendarExt.dll.dll 356KB
-
CommandHandling.dll.dll 6KB
-
ConvertRTFToHTML.exe.exe 972KB
-
CustomComboBox.dll.dll 26KB
-
DayViewUIExtensionBridge.dll.dll 58KB
-
DayViewUIExtensionCore.dll.dll 110KB
-
EncryptDecrypt.dll.dll 48KB
-
EvidenceBoardUIExtensionBridge.dll.dll 59KB
-
EvidenceBoardUIExtensionCore.dll.dll 135KB
-
FMindImportExport.dll.dll 120KB
-
FtpStorage.dll.dll 292KB
-
GPExport.dll.dll 132KB
-
GanttChartExt.dll.dll 436KB
-
Gma.CodeCloud.Controls.dll.dll 47KB
-
HTMLContentControlBridge.dll.dll 54KB
-
HTMLContentControlCore.dll.dll 40KB
-
HTMLReportExporterBridge.dll.dll 44KB
-
HTMLReportExporterCore.dll.dll 108KB
-
HtmlAgilityPack.dll.dll 153KB
-
ImageHelper.dll.dll 5KB
-
Install.Linux.txt3KB
-
Install.Windows.txt1KB
-
Itenso.Rtf.Converter.Html.dll21KB
-
Itenso.Rtf.Interpreter.dll76KB
-
Itenso.Rtf.Parser.dll39KB
-
Itenso.Solutions.Community.Rtf2Html.dll15KB
-
Itenso.Sys.dll42KB
-
KanbanBoard.dll.dll 504KB
-
LinkLabelEx.dll.dll 5KB
-
MDContentControlBridge.dll.dll 52KB
-
MDContentControlCore.dll.dll 19KB
-
MLOImport.dll.dll 112KB
-
MSDN.HtmlEditorControl.dll.dll 316KB
-
Markdig.dll.dll 393KB
-
Microsoft.VisualStudio.OLE.Interop.dll.dll 116KB
-
MindMapUIExtensionBridge.dll.dll 58KB
-
MindMapUIExtensionCore.dll.dll 64KB
-
MySpellCheck.dll.dll 48KB
-
PDFExporterBridge.dll.dll 44KB
-
PDFExporterCore.dll.dll 31KB
-
PlainTextImport.dll.dll 52KB
-
PluginHelpers.dll.dll 371KB
-
RTFContentCtrl.dll.dll 440KB
-
RadialTree.dll.dll 11KB
-
Resources/Cursors/Locked.cur133KB
-
Resources/Cursors/NoDrag.cur133KB
-
Resources/Examples/Evidence Board Photos/beetle.jpg.jpg 45KB
-
Resources/Examples/Evidence Board Photos/doll.jpg.jpg 7KB
-
Resources/Examples/Evidence Board Photos/doors.jpg.jpg 39KB
-
Resources/Examples/Evidence Board Photos/typewriter.jpg.jpg 11KB
-
Resources/Examples/Evidence Board Photos/washing line.jpg.jpg 46KB
-
Resources/Examples/Evidence Board.tdl7KB
-
Resources/Examples/Gantt Chart.tdl23KB
-
Resources/Examples/Introduction.tdl48KB
-
Resources/Examples/Introduction_Vietnamese.tdl49KB
-
Resources/Examples/London Underground Photos/bank.jpg.jpg 9KB
-
Resources/Examples/London Underground Photos/edgwareroad.jpg.jpg 8KB
-
Resources/Examples/London Underground Photos/euston.jpg.jpg 9KB
-
Resources/Examples/London Underground Photos/farringdon.jpg.jpg 7KB
-
Resources/Examples/London Underground Photos/nottinghill.jpg.jpg 13KB
-
Resources/Examples/London Underground Photos/southken.jpg.jpg 11KB
-
Resources/Examples/London Underground Photos/temple.jpg.jpg 11KB
-
Resources/Examples/London Underground Photos/tubemap.png.png 119KB
-
Resources/Examples/London Underground Photos/westmin.jpg.jpg 8KB
-
Resources/Examples/London Underground.tdl10KB
-
Resources/Examples/MeetingMinutes.rbt.js 3KB
-
Resources/Examples/Workload.tdl20KB
-
Resources/Icons/sample.ico7KB
-
Resources/Misc/Help.ini4KB
-
Resources/Misc/IgnoreCrashDumps.reg169B
-
Resources/Misc/KeepCrashDumps.reg336B
-
Resources/Misc/ManualUpdater.ps1.ps1 759B
-
Resources/Misc/README.txt812B
-
Resources/Misc/TdlSchema.xml18KB
-
Resources/Misc/TdlSchema.xsd7KB
-
Resources/Misc/UltramonCompatibilityFix.reg434B
-
Resources/Scripts/File Link Verifier/Online Help.url.url 146B
-
Resources/Scripts/File Link Verifier/ToDoList_2004.ico18KB
-
Resources/Scripts/File Link Verifier/examples/filiverto_test_cases.tdl29KB
-
Resources/Scripts/File Link Verifier/filiverto.pyw8KB
-
Resources/Stylesheets/Z_DetailedReport.xsl.xml 31KB
-
Resources/Stylesheets/Z_SimpleReport.xsl.xml 22KB
-
Resources/Stylesheets/Z_TimeSpentReport.xsl.xml 18KB
-
Resources/Stylesheets/tgEstimatesAndActuals_eng.xsl.xml 26KB
-
Resources/Stylesheets/tgEstimates_eng.xsl.xml 21KB
-
Resources/Themes/ThemeBeige.xml588B
-
Resources/Themes/ThemeBlue.Original.xml725B
-
Resources/Themes/ThemeBlue.xml788B
-
Resources/Themes/ThemeBlueXP.xml691B
-
Resources/Themes/ThemeGray.xml722B
-
Resources/Themes/ThemeGreen.xml722B
-
Resources/Themes/ThemeGreenXP.xml692B
-
Resources/Themes/ThemePurple.xml722B
-
Resources/Themes/ThemeSteel.xml719B
-
Resources/Themes/ThemeVS2010.Original.xml907B
-
Resources/Themes/ThemeVS2010.xml970B
-
Resources/Themes/ThemeWhite.Original.xml719B
-
Resources/Themes/ThemeWhite.xml784B
-
Resources/Themes/ThemeWin7Basic.xml691B
-
Resources/Translations/Danish (Denmark).WordCloud.Ignore.txt1KB
-
Resources/Translations/Danish (Denmark).csv149KB
-
Resources/Translations/Danish (Denmark).png.png 333B
-
Resources/Translations/English (UK).WordCloud.Ignore.txt1KB
-
Resources/Translations/English (US).WordCloud.Ignore.txt1KB
-
Resources/Translations/English (US).csv97KB
-
Resources/Translations/English (US).png.png 419B
-
Resources/Translations/Francais (France).WordCloud.Ignore.txt722B
-
Resources/Translations/Francais (France).csv154KB
-
Resources/Translations/Francais (France).png.png 467B
-
Resources/Translations/German (Germany).WordCloud.Ignore.txt819B
-
Resources/Translations/German (Germany).csv165KB
-
Resources/Translations/German (Germany).png.png 366B
-
Resources/Translations/Greek (Greece).csv224KB
-
Resources/Translations/Greek (Greece).png.png 222B
-
Resources/Translations/Hangul (Korea).csv150KB
-
Resources/Translations/Hangul (Korea).png.png 490B
-
Resources/Translations/Hebrew (Israel).WordCloud.Ignore.txt4KB
-
Resources/Translations/Hebrew (Israel).csv149KB
-
Resources/Translations/Hebrew (Israel).png.png 389B
-
Resources/Translations/Italiano (Italia).WordCloud.Ignore.txt1KB
-
Resources/Translations/Italiano (Italia).csv156KB
-
Resources/Translations/Italiano (Italia).png.png 473B
-
Resources/Translations/Japanese (Japan).WordCloud.Ignore.txt355B
-
Resources/Translations/Japanese (Japan).csv123KB
-
Resources/Translations/Japanese (Japan).png.png 409B
-
Resources/Translations/Nederlands (Belgium).WordCloud.Ignore.txt1KB
-
Resources/Translations/Nederlands (Belgium).csv160KB
-
Resources/Translations/Nederlands (Belgium).png.png 494B
-
Resources/Translations/Polish (Poland).WordCloud.Ignore.txt845B
-
Resources/Translations/Polish (Poland).csv159KB
-
Resources/Translations/Polish (Poland).png.png 309B
-
Resources/Translations/Russian (Russia).WordCloud.Ignore.txt4KB
-
Resources/Translations/Russian (Russia).csv229KB
-
Resources/Translations/Russian (Russia).png.png 320B
-
Resources/Translations/Simplified Chinese (China).WordCloud.Ignore.txt624B
-
Resources/Translations/Simplified Chinese (China).csv147KB
-
Resources/Translations/Simplified Chinese (China).png.png 477B
-
Resources/Translations/Slovak (Slovensko).WordCloud.Ignore.txt1KB
-
Resources/Translations/Slovak (Slovensko).csv138KB
-
Resources/Translations/Slovak (Slovensko).png.png 470B
-
Resources/Translations/Slovenian (Slovenia).WordCloud.Ignore.txt1KB
-
Resources/Translations/Slovenian (Slovenia).csv157KB
-
Resources/Translations/Slovenian (Slovenia).png.png 409B
-
Resources/Translations/Spanish (Spain).WordCloud.Ignore.txt1KB
-
Resources/Translations/Spanish (Spain).csv158KB
-
Resources/Translations/Spanish (Spain).png.png 468B
-
Resources/Translations/Ukrainian (Ukraine).csv96KB
-
Resources/Translations/Ukrainian (Ukraine).png.png 191B
-
Resources/Translations/Ukrainian (Ukriane).WordCloud.Ignore.txt3B
-
Resources/Translations/Vietnamese (Vietnam).csv181KB
-
Resources/Translations/Vietnamese (Vietnam).png.png 472B
-
Resources/Translations/YourLanguage.WordCloud.Ignore.txt1KB
-
Resources/Translations/YourLanguage.csv96KB
-
RichEditExtensions.dll.dll 10KB
-
Rtf2HtmlBridge.dll29KB
-
ScrollHelper.dll.dll 6KB
-
SpreadsheetContentControlBridge.dll.dll 55KB
-
SpreadsheetContentControlCore.dll.dll 32KB
-
TDLTransEdit.exe.exe 232KB
-
TDLUninstall.exe.exe 84KB
-
TDLUpdate.exe.exe 212KB
-
ToDoList.exe.exe 3.7MB
-
ToolStripToolTip.dll.dll 8KB
-
TransText.dll.dll 124KB
-
TreeViewHelper.dll.dll 6KB
-
UIComponents.dll.dll 6KB
-
WebBrowserEx.dll.dll 12KB
-
WordCloudUIExtensionBridge.dll.dll 58KB
-
WordCloudUIExtensionCore.dll.dll 61KB
-
WorkloadExt.dll.dll 512KB
-
iCalImportExport.dll.dll 68KB
-
iTextSharp.dll.dll 2.5MB
-
todolist.exe.xp.manifest.xml 951B
-
unvell.ReoGrid.dll.dll 1.1MB
-
unvell.ReoGridEditorControl.dll.dll 477KB
BouncyCastle.Crypto.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5530dff976bc0c889076b97ca695bdb97ef07f63449d32f893ed32398ed8bfe6
- MD5 3551343fab213740bbb022e3a6dcf27b
- SHA1 de67fb4f9d58db4a860a703c8d1f54ff00ff9b1f
- SHA512 e90f51053e1d4b0ea1f7458229de92174abf0781c766290da4de5cc8dfcfb730998252bf28b36ca5070978fdcea8b97f0aea6a47b875dd34173643ac0cb46c42
- SSDEEP 49152:3CTzhVM0AU5d3UOhq8hmReOUJfd5T3D+VTQlgQeCKbu9kQLO0:GwU5d3vhzhmoOmfd5rqX0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
2567326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BurndownExt.dll
- IMPHASH 4479eb21b633e560219120830cd849ea
- SHA256 adcc0d7535443ee153c7ac1d7f63404a98593d40c4bf5af4da348157b9529313
- MD5 716ddf2e670abcc2233b7e52199e9c04
- SHA1 4e4f39f1bf3be3014ba903e640415c6698ceaafa
- SHA512 9c1a0d344fc60fd5984f27d0953e4bf1f827d9e26c945476367d44ba45f73fd3869d5adc5c0d292654b311ab959634120f2e0240371b4a415e4416e29b6dddc6
- SSDEEP 6144:MB1w/jvPqDtYes3jXBJzGcjGkaH9jBD80oLSf:MB0jveYeSjBGVHE0Z
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
227047
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord5283
ord4829
ord4419
ord2293
ord2294
ord4848
ord4294
ord2371
ord4370
ord5276
ord937
ord933
ord3568
ord3592
ord3397
ord3716
ord795
ord641
ord324
ord3621
ord2406
ord4229
ord4803
ord5945
ord2078
ord6237
ord6871
ord6617
ord4704
ord6330
ord3566
ord2746
ord5871
ord4470
ord2634
ord5949
ord3875
ord3420
ord3688
ord818
ord755
ord470
ord2854
ord2444
ord3494
ord2507
ord355
ord3687
ord5180
ord816
ord665
ord354
ord562
ord3614
ord4128
ord4292
ord5784
ord6166
ord1257
ord1560
ord268
ord4272
ord5568
ord2910
ord1263
ord1229
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6168
ord5869
ord5785
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6017
ord6190
ord2559
ord3133
ord5977
ord939
ord935
ord3049
ord836
ord6664
ord834
ord5929
ord3050
ord940
ord941
ord922
ord926
ord2606
ord6868
ord929
ord919
ord942
ord4124
ord2755
ord2756
ord6920
ord6279
ord6278
ord6921
ord6919
ord6654
ord6655
ord924
ord859
ord925
ord927
ord4199
ord4197
ord2822
ord913
ord4184
ord4282
ord2114
ord472
ord6115
ord2855
ord5783
ord2745
ord2088
ord1143
ord4847
ord4215
ord2576
ord3649
ord809
ord5706
ord4155
ord3284
ord4158
ord807
ord554
ord556
ord2430
ord1637
ord860
ord6597
ord6195
ord6898
ord3296
ord3993
ord3991
ord2857
ord4118
ord4018
ord3288
ord4688
ord5142
ord4279
ord6211
ord4078
ord1794
ord2081
ord1197
ord3871
ord3084
ord1840
ord2574
ord3365
ord3635
ord693
ord4238
ord2706
ord6238
ord6896
ord1088
ord6754
ord3905
ord6451
ord6316
ord1792
ord4428
ord4369
ord4846
ord2505
ord293
ord5812
ord3740
ord5917
ord2442
ord3312
ord1173
ord1767
ord1930
ord3087
ord6193
ord3798
ord5858
ord6140
ord3867
ord768
ord489
ord1899
ord4253
ord4472
ord1808
ord700
ord398
ord5628
ord1761
ord2567
ord4390
ord3569
ord4042
ord5880
ord2916
ord2004
ord6266
ord2858
ord5867
ord6174
ord291
ord3290
ord6150
ord2522
ord4360
ord4051
ord5467
ord4116
ord2381
ord1703
ord1708
ord5230
ord6365
ord5275
ord5058
ord5244
ord2436
ord3725
ord559
ord812
ord2400
ord4263
ord6142
ord5080
ord6456
ord1126
ord4491
ord1932
ord4265
ord6375
ord2862
ord3016
ord4109
ord2805
ord2912
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord798
ord1989
ord2800
ord533
ord6381
ord3629
ord384
ord686
ord1635
ord2445
ord2914
ord2144
ord1821
ord3605
ord656
ord2572
ord4394
ord3625
ord682
ord397
ord699
ord3706
ord783
ord2104
ord2070
ord6124
ord3747
ord609
ord2423
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord6607
ord4224
ord2053
ord6048
ord2506
ord4992
ord1863
ord5462
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord3737
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord2116
ord2438
ord5257
ord1720
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord4371
ord5261
ord4352
ord4942
ord4970
ord4736
ord4899
ord5154
ord5156
ord5155
ord4270
ord616
ord567
ord3577
ord5273
ord2570
ord4213
ord6874
ord2057
ord801
ord541
ord2810
ord6139
ord6136
ord5854
ord3792
ord4392
ord2015
ord2403
ord2372
ord3281
ord6003
ord537
ord5059
ord4396
ord3948
ord2859
ord561
ord815
ord3733
ord4616
ord3396
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6466
ord1165
ord1662
ord2644
ord289
ord323
ord1633
ord1634
ord5781
ord640
ord613
ord341
ord654
ord3603
ord1768
ord4073
ord6051
ord6379
ord5436
ord3898
ord2099
ord2036
ord823
ord6390
ord5830
ord5446
ord2440
ord2836
ord861
ord540
ord858
ord3658
ord535
ord538
ord800
ord3805
ord4222
ord825
msvcrt
_CIfmod
_CxxThrowException
_wsplitpath
free
malloc
_wtoi
_wcsicmp
_wcsnicmp
wcsncmp
wcslen
_purecall
wcscmp
memset
wcsncpy
wcstod
fgetws
fgets
_mbschr
memcpy
qsort
__CxxFrameHandler
_ftol
_strdup
setlocale
_wtol
_wcsdup
wcschr
_wmakepath
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_except_handler3
?terminate@@YAXXZ
memmove
kernel32
lstrcmpiW
GetCurrentThreadId
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
CreateDirectoryW
SetFileAttributesW
CloseHandle
DeleteFileW
GetModuleHandleW
GetVersionExW
GetFileAttributesW
lstrcpynW
GetACP
lstrcpyW
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetTickCount
LocalFree
GetCurrentProcess
GetTimeFormatW
GetDateFormatW
GetLocaleInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalReAlloc
GlobalFree
MulDiv
LocalAlloc
user32
DeferWindowPos
CallWindowProcW
ClientToScreen
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetClassInfoW
DefWindowProcW
LoadCursorW
UpdateWindow
OffsetRect
GetDlgCtrlID
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
GetWindowRect
InflateRect
SetWindowLongW
GetParent
GetSystemMetrics
EnableWindow
IsWindowVisible
GetSysColor
GetClientRect
SendMessageW
InvalidateRect
RegisterWindowMessageW
GetMessagePos
GetSubMenu
SetMenuDefaultItem
EndDeferWindowPos
SetParent
ScreenToClient
GetNextDlgTabItem
IsChild
GetWindow
ShowScrollBar
SetWindowPos
EqualRect
LoadMenuW
PostMessageW
DestroyIcon
LoadBitmapW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetWindowLongW
GetMonitorInfoW
BeginDeferWindowPos
SetRect
CopyIcon
GetScrollPos
MapDialogRect
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
WindowFromDC
IntersectRect
IsWindow
IsRectEmpty
DrawTextA
GetTabbedTextExtentW
SetCursor
LoadImageW
CopyRect
MapVirtualKeyW
GetKeyNameTextW
RegisterClipboardFormatW
SetTimer
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoW
KillTimer
GetClassNameW
GetWindowDC
GetMenuItemCount
RedrawWindow
GetMenuItemID
GetClipboardData
GrayStringW
DrawTextW
TabbedTextOutW
GetKeyState
ReleaseCapture
SetCapture
PtInRect
DrawFrameControl
DrawFocusRect
SetRectEmpty
GetFocus
gdi32
DeleteObject
CreateFontIndirectW
GetTextMetricsW
RoundRect
Escape
Polyline
SetDIBits
ExtTextOutW
TextOutW
RectVisible
PtVisible
Polygon
SelectObject
Rectangle
GetStockObject
GetObjectW
SelectPalette
RealizePalette
GetDIBits
GetTextExtentPoint32W
CreatePen
CreateFontW
GetSystemPaletteEntries
CreatePalette
BitBlt
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
advapi32
RegQueryValueExW
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
comctl32
ImageList_Draw
_TrackMouseEvent
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_AddMasked
ImageList_ReplaceIcon
olepro32
ord252
msimg32
GradientFill
shlwapi
PathCanonicalizeW
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
240KB
Virtual Size
237KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=34, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=3, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=894, id=1, productName=Unmarked objects,
count=82, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Calendar.DayView.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9186fd1f9188126149285fdaf028654c247d7ba490097df4bc5437696b8dd885
- MD5 ed154570d2d98d4384123e66dfb4d41b
- SHA1 e495b1a6e968927698adac614ebfdd6120b583d3
- SHA512 2521ce3139c84c71c25e5abff0f65e54b1cccd74defee1773210ee334610474257f74abd2a835fb773c5589241a4405c5d5f874c3ff616cb5bd34834e327ef7f
- SSDEEP 768:iv4iPcTju9zHvmpu7SbEi5EI5suYlBCevjQTJfFL6g3toHGYzUj:+PzmpFYiz5GlvjaQg3+msUj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
59606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\DayView\obj\Release\Calendar.DayView.pdb
mscoree
_CorDllMain
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CalendarExt.dll
- IMPHASH 42c183bac8ef9a37defa03d7ae8fce2b
- SHA256 081a891776ba3fe26108c3d3bbd5aa7b6736a3bfbe0cbb6ecdc1344fbc55c10c
- MD5 c17467514fc9788c65b6b4105c1f6f6b
- SHA1 3e8dbc3cf0db6fba94cf6723bace96a372fb8619
- SHA512 e1e9cee20d900ed89270464a61c3624cb8ff8d4e63dbf83ef42f37203a759eb313844ad3541d044162171a29015e16213f6139a17d860fcd6baa1a0171b20b82
- SSDEEP 6144:xrnZwuUVuRKx7LfkYKB8nqF9HKWEuA40VgLwAnpddu:PwuUswcYQiAHKWE7VgM+ddu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
213747
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord4118
ord3566
ord5977
ord6597
ord2371
ord5871
ord4470
ord2746
ord6211
ord4294
ord832
ord5929
ord2810
ord5142
ord3434
ord937
ord933
ord935
ord541
ord801
ord2057
ord3983
ord6139
ord535
ord3898
ord2836
ord2440
ord5830
ord2036
ord2099
ord3614
ord3737
ord3706
ord783
ord700
ord398
ord913
ord5590
ord2372
ord2559
ord613
ord922
ord925
ord927
ord5785
ord289
ord2806
ord3049
ord4018
ord6124
ord2104
ord3749
ord3747
ord1165
ord836
ord3016
ord4215
ord2576
ord3649
ord2430
ord6266
ord2858
ord1637
ord4282
ord2114
ord4184
ord2855
ord6193
ord640
ord5781
ord1633
ord323
ord6871
ord4847
ord809
ord6279
ord6278
ord6868
ord5706
ord2755
ord4155
ord3284
ord4158
ord807
ord554
ord556
ord1172
ord2567
ord4390
ord3569
ord2070
ord768
ord489
ord1899
ord4253
ord6451
ord818
ord4472
ord324
ord5628
ord3792
ord1761
ord4078
ord3084
ord1173
ord2362
ord2350
ord1930
ord3312
ord3133
ord2854
ord3798
ord6874
ord537
ord5858
ord6140
ord941
ord3867
ord4279
ord2706
ord6655
ord2822
ord5568
ord2910
ord940
ord4124
ord4272
ord2756
ord6920
ord6921
ord6919
ord4273
ord2776
ord6654
ord924
ord859
ord5854
ord4199
ord4197
ord3688
ord5783
ord4128
ord4292
ord5784
ord2745
ord2444
ord2088
ord4270
ord4042
ord5880
ord2916
ord2004
ord1088
ord5867
ord6174
ord291
ord3290
ord6150
ord2522
ord4360
ord4051
ord5467
ord4116
ord2381
ord1703
ord1708
ord5230
ord6048
ord5275
ord5058
ord5244
ord2436
ord3725
ord559
ord812
ord2400
ord4263
ord2857
ord6142
ord5080
ord6456
ord1126
ord4491
ord860
ord939
ord920
ord5210
ord6664
ord834
ord3875
ord3420
ord1634
ord926
ord3051
ord929
ord919
ord3222
ord3403
ord3753
ord1932
ord4265
ord6375
ord2862
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord6168
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord755
ord6190
ord470
ord609
ord2423
ord1794
ord2442
ord397
ord699
ord3629
ord384
ord686
ord1635
ord2445
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord4224
ord3716
ord772
ord795
ord6138
ord500
ord5856
ord6126
ord6125
ord5930
ord472
ord5647
ord3126
ord3648
ord350
ord2235
ord1186
ord2558
ord4504
ord5047
ord2144
ord1230
ord1863
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord2506
ord4992
ord4848
ord4371
ord5261
ord4352
ord4942
ord4970
ord4736
ord4899
ord5154
ord5156
ord5155
ord1143
ord3948
ord823
ord2859
ord825
ord561
ord815
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord3396
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord4704
ord3087
ord6617
ord3805
ord2078
ord5945
ord942
ord4803
ord4229
ord2406
ord3621
ord326
ord641
ord3568
ord1808
ord3603
ord5812
ord6379
ord5436
ord6390
ord5446
ord5276
ord4370
ord2606
ord858
ord861
ord538
ord6136
ord2053
ord3658
ord2634
ord3871
ord6195
ord6330
ord2293
ord2294
ord654
ord540
ord567
ord341
ord800
ord616
ord3577
ord4621
ord3397
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4392
ord1768
ord4073
ord6051
ord2570
ord4213
ord2015
ord2403
ord4419
ord4829
ord5283
ord4401
ord3050
ord1767
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6365
ord6466
ord1115
msvcrt
_ftol
_wcsicmp
abs
fabs
memmove
qsort
__RTDynamicCast
memset
memcpy
wcscmp
__CxxFrameHandler
_purecall
wcstoul
wcstod
setlocale
_wtoi
wcsncpy
_wcsnicmp
wcslen
time
free
_strdup
swscanf
_wcsdup
wcschr
_wsplitpath
_wmakepath
wcsstr
malloc
_CxxThrowException
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_except_handler3
?terminate@@YAXXZ
_wtol
kernel32
lstrcatW
WinExec
LocalAlloc
GetVersionExW
GetWindowsDirectoryW
GetModuleHandleW
GetModuleFileNameW
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesW
lstrcpynW
GetACP
MulDiv
LCMapStringW
WideCharToMultiByte
GetLocaleInfoW
LocalFree
lstrlenW
lstrcpyW
LoadLibraryW
GetProcAddress
FreeLibrary
user32
RegisterClipboardFormatW
CopyIcon
SetRect
MapDialogRect
FillRect
ShowScrollBar
GetScrollPos
BeginDeferWindowPos
EndDeferWindowPos
SetWindowPos
DeferWindowPos
MonitorFromRect
CallWindowProcW
DestroyCursor
GetCursorPos
GetFocus
GetClientRect
SetWindowLongW
GetParent
EnableWindow
SendMessageW
LoadIconW
RegisterWindowMessageW
MonitorFromPoint
WindowFromDC
DrawTextA
LoadImageW
CopyRect
GetKeyState
GetKeyNameTextW
SystemParametersInfoW
DrawTextW
IsWindow
GetDC
ReleaseDC
GetNextDlgTabItem
IsChild
MapVirtualKeyW
GetWindow
GetWindowLongW
PostMessageW
DestroyIcon
GetWindowRect
LockWindowUpdate
GrayStringW
TabbedTextOutW
LoadMenuW
GetSubMenu
GetCaretPos
ClientToScreen
ReleaseCapture
LoadCursorW
SetCursor
DragDetect
SetCapture
UpdateWindow
SetRectEmpty
IntersectRect
SetScrollPos
GetLastActivePopup
GetForegroundWindow
KillTimer
SetTimer
DrawFrameControl
GetClassNameW
GetWindowDC
GetSystemMetrics
IsWindowVisible
GetMenuItemCount
GetMenuItemID
GetDlgCtrlID
SetMenuDefaultItem
RedrawWindow
OffsetRect
IsRectEmpty
SetParent
LoadBitmapW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetMonitorInfoW
MonitorFromWindow
GetSysColor
GetMessagePos
InflateRect
InvalidateRect
ScreenToClient
DrawFocusRect
PtInRect
gdi32
Escape
SetTextColor
SetBkMode
SetDIBits
LineTo
TextOutW
SetBkColor
GetCurrentObject
SetTextJustification
RectVisible
PtVisible
BitBlt
DeleteDC
GetDIBits
CreatePen
RoundRect
GetDeviceCaps
GetObjectW
CreateFontIndirectW
RestoreDC
SaveDC
SelectObject
GetTextMetricsW
GetStockObject
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
MoveToEx
CreateSolidBrush
GetTextExtentPoint32W
advapi32
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
shell32
ShellExecuteW
comctl32
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Draw
ImageList_ReplaceIcon
olepro32
ord252
msimg32
GradientFill
shlwapi
PathCanonicalizeW
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
220KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=35, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=861, id=1, productName=Unmarked objects,
count=73, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CommandHandling.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c8136e62b045b429f5de0d6d0fea9e9b179decda5be298b82b886634a678b98c
- MD5 2462ca1c940b0e0d5cadd2631bdd4484
- SHA1 086be95b14b17368f0d9aad5c63cf43d17ac5a0b
- SHA512 7825bcacdb9fcb88754bcf6d4a446ea96a2189c36d8a42ae0f025da1f4ec6a8087b0b60599c7f069dd1f8b0b723af386d1ccdb4f30a58470f4978193484ef676
- SSDEEP 48:68QHWRkA4u6wWTytbS+/JhngNM2I/pKD3JILElZLXerOxliaT9uSu8tGT8DYFcSI:I2wu61chxheI/k7JXurOjeDF/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
12490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\CommandHandling\obj\Release\CommandHandling.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
964B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ConvertRTFToHTML.exe
- IMPHASH 4acdaa8fd04b327d94b1ea36f2c7ebc8
- SHA256 1ab72306cada401a5947feb7a97fc365da5309f866d8d46fb29f457c1540f1d5
- MD5 a7da473f8338e80e70e03786893a0ce2
- SHA1 3b54eeb7569f87b428a56c3c99197a652b6b650e
- SHA512 e334e4a0d0012e242738f8db61b2e11b1f51570ac53091a4b06f0406e7b427308e4da36345a79929f4395d81ba24ffcf9b7962f88acc84f755e0f7f10e506a43
- SSDEEP 12288:2PHwpPk8eU72wU7HyGr4lmEPchRx9KzSbtI5bsx7fsOqREgy8f:2Pqmy+4lm73x9CS25bsx7fmL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
474870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42u
ord6168
ord5871
ord2372
ord5785
ord2855
ord3871
ord2859
ord6279
ord6278
ord6865
ord3792
ord2088
ord3084
ord6195
ord5977
ord3494
ord6597
ord464
ord857
ord5571
ord5679
ord2133
ord2456
ord434
ord433
ord465
ord2385
ord1649
ord5604
ord925
ord6867
ord5568
ord2910
ord941
ord942
ord940
ord5852
ord2912
ord2800
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3178
ord3506
ord3719
ord1989
ord3175
ord3171
ord798
ord5706
ord926
ord4197
ord2806
ord3805
ord6921
ord668
ord3306
ord2773
ord2762
ord356
ord3176
ord4053
ord5857
ord6773
ord665
ord354
ord3319
ord2822
ord2805
ord5180
ord533
ord1971
ord6381
ord3785
ord5438
ord654
ord341
ord5854
ord6136
ord3976
ord6918
ord6919
ord3211
ord4037
ord4199
ord6640
ord6920
ord2776
ord924
ord859
ord3982
ord711
ord413
ord5590
ord913
ord3434
ord4184
ord536
ord6193
ord5286
ord2400
ord6451
ord4282
ord2114
ord6871
ord816
ord562
ord3566
ord3621
ord640
ord2406
ord2745
ord5781
ord1634
ord1633
ord323
ord6166
ord1821
ord3397
ord3605
ord656
ord567
ord4270
ord5506
ord1640
ord429
ord3443
ord1657
ord2444
ord613
ord289
ord1826
ord5061
ord4629
ord4601
ord4710
ord4744
ord4602
ord5010
ord4369
ord4846
ord2507
ord4828
ord355
ord4224
ord3447
ord1808
ord5228
ord5264
ord860
ord4155
ord4073
ord1932
ord809
ord556
ord4265
ord6375
ord2862
ord3016
ord4118
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord3629
ord1635
ord2445
ord2746
ord3568
ord3688
ord5783
ord4128
ord4292
ord5784
ord1172
ord3614
ord6607
ord397
ord699
ord1795
ord1809
ord1920
ord1857
ord1856
ord1850
ord1851
ord1937
ord4078
ord1834
ord1789
ord4183
ord912
ord1899
ord1829
ord1792
ord1831
ord1890
ord1897
ord2559
ord6770
ord812
ord6140
ord559
ord5624
ord1644
ord2455
ord909
ord1173
ord4180
ord394
ord696
ord3638
ord1243
ord5268
ord5267
ord2350
ord319
ord2351
ord2331
ord2290
ord2332
ord2291
ord2333
ord2292
ord1930
ord3312
ord2072
ord3133
ord4294
ord2854
ord3798
ord5858
ord5606
ord6211
ord4279
ord2706
ord3491
ord836
ord5815
ord3642
ord700
ord398
ord5929
ord2057
ord935
ord933
ord920
ord837
ord930
ord838
ord5599
ord929
ord5628
ord1569
ord6048
ord3867
ord384
ord686
ord4667
ord1768
ord6051
ord537
ord539
ord6139
ord6874
ord6390
ord5830
ord6433
ord6437
ord6238
ord1761
ord329
ord5978
ord1177
ord2443
ord2139
ord5945
ord643
ord1561
ord5714
ord325
ord3753
ord3403
ord3222
ord919
ord3051
ord832
ord3050
ord3420
ord3875
ord834
ord6664
ord5210
ord3049
ord937
ord939
ord4283
ord4280
ord1137
ord353
ord1863
ord547
ord6489
ord5462
ord2914
ord532
ord4028
ord4992
ord4370
ord5261
ord3948
ord1143
ord1131
ord6113
ord2506
ord641
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord6379
ord5436
ord5446
ord3898
ord823
ord2099
ord2036
ord861
ord2756
ord6654
ord6655
ord4273
ord4272
ord4124
ord922
ord541
ord2755
ord927
ord6868
ord2440
ord6330
ord6399
ord6398
ord1197
ord1662
ord535
ord2810
ord2606
ord4847
ord2644
ord801
ord2836
ord3658
ord470
ord755
ord2371
ord4704
ord3087
ord2634
ord4229
ord2294
ord2362
ord2293
ord324
ord540
ord1165
ord3517
ord858
ord3516
ord3592
ord4419
ord4621
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord4109
ord1767
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord800
ord538
ord432
msvcrt
_wcsicmp
wcscmp
_ftol
_wcsnicmp
_wtoi
strncmp
free
malloc
realloc
_wtol
wcstol
wcsstr
floor
_wcsicoll
_mbschr
fgets
fgetws
calloc
_CxxThrowException
iswspace
iswalnum
wcslen
iswdigit
_wutime
wcschr
isdigit
_wsplitpath
_wmakepath
wcsncpy
__CxxFrameHandler
rand
srand
time
wcstod
_strdup
setlocale
towupper
towlower
iswupper
iswlower
qsort
wcsspn
_purecall
_wcsdup
wprintf
_chdrive
_getdrive
toupper
swscanf
isspace
isalnum
wcstoul
swprintf
ceil
_CIpow
localtime
_exit
_XcptFilter
exit
wcsncmp
_initterm
_wcmdln
__wgetmainargs
memmove
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_controlfp
kernel32
lstrcmpiW
GetProcessHeap
HeapAlloc
HeapFree
GetACP
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetVersionExW
lstrcpynW
GetVersion
MulDiv
LockResource
GetNumberFormatW
GetCurrencyFormatW
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetComputerNameW
GlobalAlloc
GlobalFree
FormatMessageW
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
LoadLibraryExW
GetSystemDirectoryW
GetWindowsDirectoryW
lstrcmpW
GetModuleHandleW
GetCurrentProcess
OpenProcess
GetModuleFileNameW
FindResourceW
SizeofResource
LoadResource
CreateProcessW
ExpandEnvironmentStringsW
GetTempFileNameW
GetTempPathW
MoveFileW
CopyFileW
CreateDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetLongPathNameW
SetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
SetFileTime
CloseHandle
MoveFileExW
InterlockedDecrement
GetTickCount
SetEndOfFile
GetFileSize
GetLastError
lstrcpyW
lstrcpyA
LoadLibraryW
GetProcAddress
RemoveDirectoryW
lstrlenW
DeleteFileW
SetCurrentDirectoryW
lstrlenA
InterlockedIncrement
GetUserDefaultLangID
FreeLibrary
GlobalSize
SetLastError
GlobalReAlloc
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDateFormatW
GetTimeFormatW
GetStartupInfoW
user32
EnumClipboardFormats
TranslateMessage
IsDialogMessageW
DispatchMessageW
PeekMessageW
GetClipboardData
CloseDesktop
SystemParametersInfoW
RegisterWindowMessageW
GetSystemMetrics
LoadIconW
EnableWindow
SendMessageW
DrawIcon
GetClientRect
IsIconic
RegisterClipboardFormatW
DestroyIcon
GetSysColor
FillRect
GetFocus
OffsetRect
wvsprintfW
EmptyClipboard
SetClipboardData
CloseClipboard
wsprintfW
GetLastInputInfo
GetWindowThreadProcessId
GetSysColorBrush
GetParent
DrawIconEx
InvalidateRect
PtInRect
CharLowerBuffW
OpenClipboard
GetDC
WindowFromPoint
ChildWindowFromPoint
MessageBoxW
GetNextDlgTabItem
IsChild
IsWindowVisible
EqualRect
GetDlgItem
GetWindowTextW
SetWindowLongW
PostMessageW
CallWindowProcW
MapDialogRect
DrawFrameControl
GetClassNameW
GetIconInfo
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SetRectEmpty
WindowFromDC
IntersectRect
DrawTextA
GetTabbedTextExtentW
SetCursor
LoadCursorW
CopyRect
InflateRect
LoadBitmapW
GrayStringW
TabbedTextOutW
SetTimer
GetWindowLongW
GetWindow
GetLastActivePopup
GetForegroundWindow
GetDlgCtrlID
KillTimer
ScreenToClient
DrawTextW
ReleaseDC
GetDesktopWindow
LoadImageW
GetClipboardFormatNameW
IsClipboardFormatAvailable
IsWindow
RedrawWindow
IsRectEmpty
TrackPopupMenuEx
GetMessagePos
GetWindowRect
ClientToScreen
ReleaseCapture
SetCapture
CopyIcon
GetKeyState
MapVirtualKeyW
GetKeyNameTextW
SetFocus
IsWindowEnabled
MoveWindow
SetActiveWindow
GetActiveWindow
UpdateWindow
CreateWindowExW
SetRect
GetKeyboardLayout
OpenInputDesktop
gdi32
DeleteDC
CreateDIBSection
GetBkColor
CreatePen
CreateSolidBrush
RoundRect
GetTextMetricsW
CreateFontIndirectW
RestoreDC
SaveDC
Escape
TextOutW
RectVisible
PtVisible
SetDIBits
GetDIBits
GetObjectW
DeleteObject
GetStockObject
ExtTextOutW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
SelectObject
CopyMetaFileW
GetDIBColorTable
GetTextExtentPoint32W
advapi32
RegEnumValueW
OpenProcessToken
GetUserNameW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegEnumKeyW
GetTokenInformation
RegQueryValueExW
RegDeleteValueW
shell32
SHGetFileInfoW
ExtractIconExW
SHChangeNotify
SHBrowseForFolderW
ShellExecuteW
DragQueryFileW
SHGetSpecialFolderPathW
StrStrW
SHGetMalloc
SHGetPathFromIDListW
comctl32
InitCommonControlsEx
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIcon
ImageList_AddMasked
ImageList_GetIconSize
_TrackMouseEvent
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleRun
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
CoCreateInstance
olepro32
ord251
ord252
oleaut32
OleLoadPicturePath
SysStringLen
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantInit
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear
urlmon
URLDownloadToFileW
shlwapi
PathRelativePathToW
UrlCreateFromPathW
PathCanonicalizeW
PathIsRelativeW
PathIsURLW
PathCreateFromUrlW
wininet
DeleteUrlCacheEntry
InternetQueryOptionW
rpcrt4
UuidFromStringW
RpcStringFreeW
UuidCreate
UuidToStringW
msimg32
GradientFill
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
772KB
Virtual Size
770KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
72KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=10, version=8966,
count=3, id=11, version=8798,
count=15, id=19, version=8022,
count=39, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=5, id=14, version=7299,
count=3, id=4, version=9782,
count=787, id=1, productName=Unmarked objects,
count=77, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CustomComboBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49d7088c31b06a0bcffe1ad5aeaf10b85ba70f33f0a5c182c38da13b92c88671
- MD5 f87cc44f41ac8607c805f28cdad58cff
- SHA1 79e44cb8b1d56ae25886f578465e53dd70b9faf0
- SHA512 4aa6a5d10337a4c5b2e45f049fe8e3429fb8a989d3f0b47cf96bcad9fb10dc51f350a30abdcdd225077a96f9ef458fddc4aafcf1e8115fd4670d1733df332502
- SSDEEP 768:SoKD1S9rjnvBilbyR/ysiUd9Vs+FeaxZAgqF:uS9rTvBiqKszs+biF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
32970
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\CustomComboBox\obj\Release\CustomComboBox.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DayViewUIExtensionBridge.dll
- IMPHASH d59cb0807befe220603cdb116418961f
- SHA256 fa7b61ce7a41feb36fbaa65cc4015204f725b8182a182c056d9fb577ee783168
- MD5 260269de6acbaa2cf9f8aa8c24f8874f
- SHA1 1b80d857764d80282a0d1aa143c2cd0b33aca8e1
- SHA512 452a01de49dd53b9ef83477fca1a6b54a6dbf379a5d38d965941562b191bbdd6a37d8643066756fcaefaf9aba5415a2ce63ba512257c48895c3224ccc510e9ff
- SSDEEP 768:ZCwIplAQkPeheXcViFebTuAdO+uSbMJ/QIBfnSn+0/O2/rkL3PY2B4lyQn437jf5:V+lNkPAxsJffSn+YiY2BX375b
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
16628
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\DayViewUIExtensionBridge.pdb
vcruntime140
__FrameUnwindFilter
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
LoadLibraryW
Sleep
user32
RegisterWindowMessageW
MoveWindow
SetWindowLongW
SetParent
LoadImageW
mscoree
_CorDllMain
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
716B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=47, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
DayViewUIExtensionCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41566b12534e10ba7d607d8256ae66234ade6c90712e4547bf8912f418faa34b
- MD5 9c4ee9ab787948406ba5a46a9d88a319
- SHA1 f85bdc4c45012af426e2b1b8a02c7de57dfbca50
- SHA512 b2d42dd4dcfbefd31964aab7e48fa2fc4538ff0a6954e9a8d7a5f4a8eb2d977b5fe307f4e79d621fe96a40f53349c85c9e1b49299be48e626f80aaa6fe2e87c2
- SSDEEP 1536:IMX4NBOlQHG/fq4UewnmeSG58dfBWFDmr6EygnKiiAmjOo/aYM6Nc5Jtw:IxcSetVfBaDmNTnKYmjOo9N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
118318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\UIExension\DayViewUIExtension\DayViewUIExtensionCore\obj\Release\DayViewUIExtensionCore.pdb
mscoree
_CorDllMain
Name
.text
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
EncryptDecrypt.dll
- IMPHASH b519c8b33d3198f8917dcb361112bf3d
- SHA256 e3ea313a3743c402a4e5ffce02c45c5f4d6fe3f080c0b2ec202500ba0f02b66b
- MD5 0617e972730cb137edb275eb286a9a87
- SHA1 516996e77d95a2722f4a46e68658872fe73e59ff
- SHA512 218fa25b1421807764d32e57d007ab13c2b67a4abf3e1d85b1c127d871dc927f1243acdaa45d51a0963af7ce58db0b7f2daa37138ec08f6f58b8eab965ace271
- SSDEEP 768:sMEpPMoJ7GcIQQ6CCuALMqWNU+K74FV2pRpWbSDHCHFAHoAL:sNZQALMqqU+NV23S2IAL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17571
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
rand
memcmp
??2@YAPAXI@Z
strlen
memcpy
??3@YAXPAX@Z
__CxxFrameHandler
memset
_purecall
kernel32
GetCurrentProcess
GetTickCount
QueryPerformanceCounter
GetLocalTime
GlobalMemoryStatus
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetProcessHeap
GetSystemInfo
GetStartupInfoW
user32
GetOpenClipboardWindow
GetMessageTime
GetMessagePos
GetInputState
GetForegroundWindow
GetFocus
GetDesktopWindow
GetClipboardViewer
GetClipboardOwner
GetCapture
GetActiveWindow
GetCaretPos
GetCursorPos
CreateEncryptionInterface
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
822B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=3, id=4, version=8047,
count=41, id=1, productName=Unmarked objects,
count=4, id=19, version=8034,
count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
EvidenceBoardUIExtensionBridge.dll
- IMPHASH 20ebf8492161cdd29f7605670267db96
- SHA256 cd118f1c07578012e2a59d6e1b6835706e5eb5adc67073a36b93ef9ee76a7a3c
- MD5 e2fbfbb5b1cd344c4d420071f092030a
- SHA1 ed54ae71ccd65d67325d9b385e387c3a0d82e7d4
- SHA512 f8b22c306580e0b0ada5daefa1014dc86e9f2878cf58db655fe21a5f258829bae5901b9f8ec9500148f811dbffe4ab8a5ec995633d2925a244b35079d69614c7
- SSDEEP 768:tWdDArgJLkbMyViFebTuAdO+uSJjpWSYil1AWXiMk/ObJTALOGSY2glyQzPTVRjE:tWdDArgJk42hAgMM3r/Y2kPTbDU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\EvidenceBoardUIExtensionBridge.pdb
vcruntime140
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
LoadLibraryW
Sleep
GetCurrentProcess
user32
RegisterWindowMessageW
DestroyWindow
LoadImageW
MoveWindow
SetWindowLongW
SetParent
mscoree
_CorDllMain
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
712B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=48, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
EvidenceBoardUIExtensionCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 760e901feab29401265dcc773186697a8e4606590915263a38a5d2c0f70b183d
- MD5 1df8c34f488cb21c2e7895713daaabb1
- SHA1 a8e6fdfc747819c405866285487d9415114cf811
- SHA512 0f1c73ac36e8c39c74073af080c1dfee4153dd4bf584bddf6dad8281b7f17eae436fdb07aa5114e45e2d9f4852487af2947360ecf7d5aa88600bed34dd0723db
- SSDEEP 3072:vgSJwIw9l8oq3Fp+Dd3W/wbbNQe7onK44EG1:Ixl8r37+DOK44
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
143410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\UIExension\EvidenceBoardUIExtension\EvidenceBoardUIExtensionCore\obj\x86\Release\EvidenceBoardUIExtensionCore.pdb
mscoree
_CorDllMain
Name
.text
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FMindImportExport.dll
- IMPHASH 83a9bc035f76595a3efa233b95355148
- SHA256 a37c5506af717d8200d08456d7161974c69723687111e8de974e5d319b93ecd6
- MD5 33c0f23276eef47c4fcff7e4c3414423
- SHA1 fb84e1fd462649c2d00eececacd179ced111e1e8
- SHA512 10ecc9e98c2b0e155a98afa7fda0173f8010a98420c033429a07098d7f2a3f367c4753d721a1c663061e818ec015d2308f411d7693ac4e4831addc52e4cdd72c
- SSDEEP 1536:jnribM6mBHT27UfDsDKqnVFszCrR6fG57kJrDx8hBTs7g:zOY5cnIE57uxmTs7g
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63384
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord2822
ord2805
ord533
ord6381
ord6919
ord927
ord2776
ord924
ord859
ord4199
ord5210
ord6664
ord5929
ord1165
ord354
ord2914
ord5462
ord1863
ord665
ord2910
ord5568
ord5857
ord6874
ord925
ord6921
ord3805
ord6278
ord2755
ord6390
ord6379
ord5436
ord5446
ord926
ord6655
ord5706
ord922
ord798
ord3171
ord3175
ord1989
ord3719
ord3506
ord3178
ord5188
ord2598
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1194
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord2912
ord5852
ord2606
ord2099
ord2836
ord6654
ord4273
ord942
ord3658
ord6466
ord823
ord815
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord3396
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord3948
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6139
ord537
ord4124
ord941
ord6279
ord861
ord541
ord801
ord3983
ord2810
ord940
ord540
ord6868
ord2756
ord4272
ord858
ord535
ord538
ord800
ord1115
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord825
msvcrt
__dllonexit
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_onexit
_mbschr
fgets
fgetws
_CxxThrowException
swscanf
setlocale
_strdup
wcstod
free
wcslen
wcsncpy
_wmakepath
_wsplitpath
wcschr
iswdigit
_wcsicmp
_wtoi
wcstoul
_wtol
wcscmp
__CxxFrameHandler
_purecall
kernel32
GetCurrentProcess
lstrcpyW
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
CreateDirectoryW
GetFileAttributesW
GetProcAddress
SetFileAttributesW
CloseHandle
DeleteFileW
InterlockedDecrement
GetTickCount
SetEndOfFile
GetFileSize
GetLastError
lstrlenW
LoadLibraryW
LocalFree
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
LocalFileTimeToFileTime
SystemTimeToFileTime
MulDiv
GetACP
LocalAlloc
InterlockedIncrement
lstrlenA
user32
LoadImageW
GetDC
ReleaseDC
DestroyIcon
RegisterClipboardFormatW
gdi32
GetDeviceCaps
advapi32
GetTokenInformation
OpenProcessToken
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
OleRun
oleaut32
GetErrorInfo
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathCanonicalizeW
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=15, id=19, version=8022,
count=33, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=479, id=1, productName=Unmarked objects,
count=36, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
FtpStorage.dll
- IMPHASH 56680595901a0316a02968ff906e6897
- SHA256 d66da581289efa449c5e5633142ed8cbb05aba10aeb019b2ff060d1f2a4aedd7
- MD5 afacfccb065809acc42015b95da2e288
- SHA1 9c2219bbfb8d79416dbbab23e68974c7297aad40
- SHA512 b28b35e19db792a4a4203b43c5ff760f7bb40c699bd672fce91196f280cf93cad1cf3761c7a40194833f8d2a66e1059d19c84f1bce6727630f719295e391e606
- SSDEEP 6144:sR5roylA3YDOMMm09pJl4Li/6kMTXaAEFZ8ud/to:U5rRlUdFLpJWIMTXxE3Ho
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
158170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord859
ord6868
ord4199
ord913
ord4184
ord3805
ord926
ord3306
ord2805
ord2912
ord964
ord6313
ord4177
ord6388
ord5444
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord798
ord1989
ord2800
ord533
ord5261
ord4992
ord6048
ord1767
ord4401
ord4419
ord2403
ord2015
ord4213
ord2570
ord6051
ord4073
ord1768
ord4392
ord5237
ord2377
ord5157
ord6370
ord4347
ord5286
ord3793
ord4831
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord3397
ord4621
ord3577
ord567
ord2293
ord2294
ord2291
ord3087
ord6330
ord5977
ord3312
ord2036
ord2099
ord2836
ord2440
ord5830
ord2371
ord4229
ord4370
ord4847
ord5276
ord4215
ord2576
ord3649
ord809
ord2114
ord6617
ord807
ord554
ord556
ord2430
ord1637
ord1143
ord325
ord4294
ord4704
ord2746
ord1634
ord2406
ord3898
ord613
ord5785
ord2855
ord289
ord2859
ord5871
ord3621
ord2745
ord3566
ord2444
ord5781
ord640
ord1633
ord323
ord2088
ord3614
ord398
ord700
ord1808
ord3792
ord5228
ord6193
ord5714
ord1561
ord5264
ord643
ord5945
ord2139
ord2443
ord1177
ord5978
ord329
ord1761
ord6451
ord6211
ord6871
ord6238
ord2862
ord3693
ord2574
ord4396
ord3365
ord3635
ord693
ord1172
ord5949
ord2637
ord4279
ord3012
ord5867
ord3296
ord5918
ord6896
ord3173
ord6898
ord833
ord836
ord3993
ord3281
ord6266
ord6597
ord4369
ord4846
ord324
ord924
ord860
ord4118
ord536
ord1243
ord5268
ord1173
ord2362
ord4078
ord1930
ord4282
ord3084
ord3871
ord3867
ord2914
ord2559
ord3629
ord384
ord686
ord1635
ord2445
ord2400
ord397
ord699
ord1826
ord6433
ord3706
ord783
ord4270
ord755
ord470
ord2104
ord6168
ord2372
ord6865
ord6607
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord816
ord562
ord6166
ord1821
ord3605
ord656
ord5061
ord4629
ord4601
ord4710
ord4744
ord4602
ord5010
ord4828
ord6399
ord3517
ord1932
ord4265
ord6375
ord3016
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord5462
ord1863
ord6655
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord3948
ord535
ord858
ord541
ord540
ord861
ord925
ord922
ord801
ord825
ord561
ord815
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord3396
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord537
ord6654
ord4273
ord6919
ord6921
ord6278
ord6918
ord6920
ord4272
ord4124
ord2755
ord2910
ord5568
ord4155
ord2822
ord6390
ord5446
ord6379
ord5436
ord3313
ord5438
ord5580
ord6195
ord5195
ord354
ord5180
ord6381
ord1971
ord665
ord369
ord2763
ord2774
ord3314
ord676
ord389
ord2810
ord616
ord3210
ord2385
ord1197
ord356
ord2762
ord2773
ord4053
ord3176
ord4197
ord1972
ord2756
ord942
ord668
ord3447
ord6139
ord355
ord2507
ord3494
ord641
ord1165
ord1662
ord2644
ord823
ord6867
ord6279
ord6874
ord941
ord940
ord2634
ord765
ord3658
ord4224
ord2606
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6466
ord800
ord3991
ord538
msvcrt
_wtoi
wcslen
_ftol
_wcsicmp
wcsncpy
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
wcscmp
free
_wcsdup
__CxxFrameHandler
_purecall
malloc
_mbschr
fgets
fgetws
wcschr
_wsplitpath
_wmakepath
wcsstr
toupper
wcstoul
wcstol
isspace
memmove
_CxxThrowException
kernel32
GetVersion
LocalAlloc
GetDriveTypeW
GetVersionExW
GetACP
FreeLibrary
lstrcmpW
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
ExpandEnvironmentStringsW
GetTempFileNameW
GetTempPathW
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetFileAttributesW
FileTimeToLocalFileTime
CloseHandle
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
GetCurrentProcess
MulDiv
GetFileAttributesW
lstrcpyW
lstrlenW
DeleteFileW
lstrcpynW
user32
CallWindowProcW
ClientToScreen
SetWindowLongW
CopyIcon
SetCapture
ReleaseCapture
GetMessagePos
RedrawWindow
KillTimer
GetLastActivePopup
InvalidateRect
TabbedTextOutW
GrayStringW
IsDialogMessageW
TranslateMessage
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextW
DestroyIcon
GetSystemMetrics
RegisterWindowMessageW
GetFocus
wvsprintfW
GetWindowTextW
MessageBoxW
GetForegroundWindow
CreatePopupMenu
InsertMenuW
CheckMenuRadioItem
SetForegroundWindow
SetRect
CreateWindowExW
DeferWindowPos
IsWindowVisible
EqualRect
UpdateWindow
GetParent
IsWindowEnabled
GetActiveWindow
SetActiveWindow
LoadBitmapW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetWindowLongW
GetMonitorInfoW
MonitorFromWindow
SetWindowPos
EndDeferWindowPos
BeginDeferWindowPos
PtInRect
GetSysColorBrush
FillRect
ShowScrollBar
MapDialogRect
DrawFrameControl
GetClassNameW
MonitorFromPoint
SetRectEmpty
IntersectRect
IsWindow
GetClientRect
IsRectEmpty
DrawTextA
GetSysColor
SetCursor
LoadCursorW
LoadImageW
GetDC
ReleaseDC
CopyRect
InflateRect
GetWindowRect
OffsetRect
PostMessageW
EnableWindow
SendMessageW
RegisterClipboardFormatW
GetKeyState
GetWindow
LoadIconW
ScreenToClient
SystemParametersInfoW
PeekMessageW
SetTimer
DispatchMessageW
gdi32
TextOutW
Escape
RectVisible
PtVisible
ExtTextOutW
SetDIBits
BitBlt
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
GetTextExtentPoint32W
advapi32
RegQueryValueExW
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderPathW
ExtractIconExW
SHGetMalloc
SHGetPathFromIDListW
StrStrW
SHBrowseForFolderW
comctl32
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Remove
ole32
CoUninitialize
CoCreateInstance
CoInitialize
olepro32
ord252
oleaut32
VariantClear
OleLoadPicturePath
shlwapi
PathCanonicalizeW
PathRelativePathToW
PathIsURLW
PathIsRelativeW
CreateTasklistStorageInterface
GetInterfaceVersion
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
44KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=11, id=19, version=8022,
count=38, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=796, id=1, productName=Unmarked objects,
count=58, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
GPExport.dll
- IMPHASH caaec5e82039dfe8c9ee37365bdb9a89
- SHA256 10d094e95136c6855a80e42e4c06d2a3e2a69f6a9f5ef4711add9a3c67ba49c8
- MD5 5b0fe53ca2056e4e0da55b278c79b525
- SHA1 5813f4fe2cd5d1e0df06091243273c2efa91f2f3
- SHA512 bddc124725844a6cd25fe5bc722c828c0b64d22ab7f9587cc800da4f928f709cb0c8abb2d62f6b128beccce3a714ce108ee1e87fd111c5dbbf84fd0c10eba5c6
- SSDEEP 1536:IDdHjPz9KYjIgcUDgjXvYLccxZOjK3Z61A/B1md/stDvh4q4P70KOU:gdHdDwjXvUCK3oMB1WstDKq4P70KD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67185
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord1165
ord941
ord942
ord4273
ord940
ord4124
ord6654
ord537
ord2606
ord5852
ord2912
ord2800
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3178
ord3506
ord3719
ord1989
ord3175
ord3171
ord798
ord922
ord6655
ord926
ord4197
ord5568
ord2910
ord6921
ord6919
ord2776
ord6874
ord859
ord6139
ord4199
ord2822
ord933
ord920
ord5210
ord6664
ord834
ord5929
ord3805
ord3050
ord929
ord2914
ord5857
ord665
ord354
ord2805
ord533
ord6381
ord5462
ord1863
ord5706
ord6279
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1194
ord1240
ord541
ord801
ord925
ord4229
ord2371
ord535
ord4272
ord6379
ord5436
ord3898
ord2099
ord2036
ord2440
ord2836
ord6390
ord5830
ord5446
ord2810
ord861
ord2755
ord6278
ord2756
ord927
ord858
ord6868
ord538
ord540
ord800
ord3658
ord6466
ord823
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord3948
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord1115
ord1173
ord1568
ord1570
ord1179
ord342
ord4269
msvcrt
__dllonexit
_initterm
malloc
_mbschr
_adjust_fdiv
??1type_info@@UAE@XZ
_onexit
fgets
fgetws
_CxxThrowException
_wmakepath
_wsplitpath
wcschr
swscanf
free
_ftol
wcslen
iswdigit
wcscmp
memset
_wtoi
_wcsicmp
__CxxFrameHandler
_purecall
kernel32
DeleteFileW
GetACP
lstrcpyW
MulDiv
GetDateFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
lstrlenW
FormatMessageW
LocalFree
GetCurrentProcess
InterlockedDecrement
GetTickCount
SetEndOfFile
GetFileSize
GetLastError
LoadLibraryW
GetProcAddress
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetTimeFormatW
LocalAlloc
InterlockedIncrement
GetLocaleInfoW
lstrlenA
user32
LoadImageW
GetDC
ReleaseDC
RegisterWindowMessageW
DestroyIcon
PostMessageW
RegisterClipboardFormatW
gdi32
GetDeviceCaps
advapi32
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
OleRun
oleaut32
GetErrorInfo
SysFreeString
SysAllocString
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
shlwapi
PathCanonicalizeW
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
72KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=15, id=19, version=8022,
count=33, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=556, id=1, productName=Unmarked objects,
count=40, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
GanttChartExt.dll
- IMPHASH 1571165e0d2da9a594612a1a04f45d1e
- SHA256 5aa20d515c1868f36c84645b45a430028228a0ba74b7936d6da0721a970f1597
- MD5 fd406e8b48f6dfd584ed2055c442000f
- SHA1 16e79b917f9556eb3c85201b9be00cf9bb841ff5
- SHA512 1ce8f5131c3573769059aba19563361ba9e9a4b9a1c0ce51a6fa2c703e078af4705b899804adcfc3e5b358aeb3fb81374b2044652252ce15e247e205c907b0cc
- SSDEEP 6144:m827A7XaK3Ww+O6P/nNAhBXG6qJ0+SdcEAItzdgs5L0:jTafws/a726LuEGsF0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
274525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3688
ord5781
ord5784
ord5783
ord6896
ord3420
ord6125
ord5785
ord3805
ord3792
ord3049
ord836
ord929
ord5599
ord2403
ord2015
ord4392
ord4270
ord940
ord941
ord924
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord5283
ord4829
ord2293
ord5886
ord4848
ord4370
ord4213
ord2570
ord3577
ord567
ord616
ord6115
ord2057
ord4847
ord4215
ord2576
ord3649
ord809
ord2114
ord6279
ord6278
ord6868
ord5706
ord2755
ord4155
ord3284
ord4158
ord807
ord554
ord556
ord2430
ord1637
ord1165
ord2567
ord4390
ord3569
ord2070
ord5880
ord2916
ord2004
ord6266
ord2858
ord1088
ord5867
ord6174
ord291
ord537
ord3290
ord6150
ord2522
ord4360
ord4051
ord5467
ord4116
ord2381
ord1703
ord1708
ord5230
ord6365
ord5275
ord5058
ord5244
ord2436
ord3725
ord559
ord812
ord2400
ord4263
ord6142
ord2088
ord5080
ord2706
ord6456
ord5858
ord6140
ord1126
ord4491
ord768
ord489
ord1899
ord4253
ord818
ord4472
ord1808
ord2606
ord700
ord398
ord4184
ord913
ord5628
ord1761
ord6871
ord4078
ord3084
ord3614
ord755
ord6168
ord3871
ord470
ord4638
ord1764
ord6362
ord2405
ord2016
ord4212
ord2568
ord4391
ord3347
ord3572
ord384
ord692
ord686
ord4220
ord2932
ord3798
ord5259
ord4055
ord5263
ord1712
ord4752
ord1772
ord1933
ord3393
ord3728
ord810
ord4266
ord3291
ord6193
ord3915
ord2855
ord4282
ord4500
ord2574
ord4396
ord3365
ord3635
ord693
ord6437
ord6238
ord2092
ord2085
ord2115
ord3016
ord5977
ord2751
ord2036
ord3898
ord4199
ord2822
ord4128
ord4292
ord2745
ord2444
ord640
ord1633
ord323
ord2440
ord5830
ord5568
ord2910
ord1173
ord2350
ord939
ord1930
ord3312
ord3133
ord3867
ord6211
ord6655
ord6664
ord834
ord926
ord3051
ord919
ord4124
ord4272
ord2756
ord6920
ord6921
ord6919
ord6654
ord859
ord5604
ord927
ord4197
ord5624
ord1644
ord2455
ord2862
ord909
ord4180
ord394
ord696
ord3638
ord3292
ord3995
ord6004
ord3285
ord2572
ord4394
ord3397
ord3625
ord682
ord6712
ord6900
ord1794
ord2442
ord5674
ord5732
ord4042
ord609
ord2423
ord3629
ord1635
ord2445
ord3706
ord783
ord2104
ord6124
ord3747
ord5142
ord1792
ord4428
ord4369
ord4846
ord2505
ord293
ord4222
ord3740
ord5917
ord1932
ord4265
ord6375
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5869
ord5790
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord397
ord699
ord4224
ord1263
ord1229
ord816
ord562
ord1137
ord1863
ord935
ord933
ord2559
ord4120
ord6754
ord3050
ord2372
ord3905
ord3909
ord3749
ord289
ord613
ord2854
ord3288
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord2857
ord5929
ord3875
ord6139
ord5857
ord6136
ord5854
ord3983
ord3282
ord3298
ord920
ord937
ord2053
ord4279
ord3737
ord5286
ord1768
ord6051
ord541
ord536
ord6874
ord922
ord858
ord801
ord6195
ord6451
ord2362
ord861
ord2099
ord2836
ord6379
ord5436
ord6390
ord5446
ord535
ord5949
ord341
ord2746
ord4470
ord5871
ord4294
ord4704
ord3087
ord6617
ord2371
ord3566
ord2634
ord6597
ord4118
ord1634
ord6330
ord540
ord2810
ord925
ord2078
ord5945
ord538
ord942
ord4803
ord4229
ord2294
ord654
ord2406
ord3621
ord800
ord324
ord641
ord3592
ord4419
ord4621
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord5261
ord3658
ord3568
ord1143
ord3948
ord823
ord2859
ord825
ord561
ord815
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord3396
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6466
msvcrt
_except_handler3
wcstod
swprintf
setlocale
wcsncpy
_wcsicmp
_wtol
iswlower
towupper
iswupper
towlower
memmove
_ftol
wcscmp
_wtoi
memset
memcpy
__CxxFrameHandler
_purecall
free
_strdup
qsort
_wsplitpath
_wmakepath
_wcsdup
malloc
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
kernel32
GetCurrentThread
LCMapStringW
GetLastError
LocalFree
GetCurrentProcess
GetDateFormatW
GetLocaleInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
lstrcpyW
GetFileAttributesW
lstrlenW
lstrcpynW
LoadLibraryW
GetProcAddress
FreeLibrary
MulDiv
GetModuleFileNameW
GetModuleHandleW
GetVersionExW
GetTimeFormatW
LocalAlloc
SetLastError
VirtualQuery
GetCurrentThreadId
InterlockedCompareExchange
VirtualProtect
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
DebugBreak
VirtualAlloc
user32
GetForegroundWindow
GetLastActivePopup
GrayStringW
DefWindowProcW
GetClassInfoW
GetCapture
GetCursor
RedrawWindow
IsRectEmpty
GetWindowRect
LoadMenuW
DestroyIcon
IntersectRect
ReleaseCapture
ClientToScreen
DragDetect
SetCapture
GetSystemMetrics
SetWindowPos
InflateRect
GetSysColorBrush
GetSysColor
OffsetRect
TrackMouseEvent
MessageBeep
ScreenToClient
GetDC
ReleaseDC
GetMessagePos
InvalidateRect
PostMessageW
CopyRect
UpdateWindow
IsWindow
EnableWindow
GetClientRect
GetFocus
SetWindowLongW
DeferWindowPos
SendMessageW
LoadIconW
RegisterWindowMessageW
SetScrollPos
ScrollWindowEx
SetTimer
GetKeyState
GetKeyNameTextW
SystemParametersInfoW
EndDeferWindowPos
BeginDeferWindowPos
SetRect
CopyIcon
RegisterClipboardFormatW
DrawTextW
MapDialogRect
ChildWindowFromPoint
GetNextDlgTabItem
IsChild
MapVirtualKeyW
EqualRect
GetWindow
LockWindowUpdate
DrawFrameControl
GetClassNameW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetWindowLongW
SetParent
TabbedTextOutW
CallWindowProcW
GetScrollRange
ShowWindow
ShowScrollBar
GetScrollInfo
SubtractRect
GetCursorPos
MoveWindow
GetParent
SetFocus
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
WindowFromDC
GetTabbedTextExtentW
SetCursor
LoadCursorW
LoadImageW
UnionRect
SetRectEmpty
KillTimer
GetScrollPos
DrawFocusRect
GetDlgItem
IsWindowVisible
GetWindowDC
LoadBitmapW
IsWindowEnabled
GetMenuItemCount
GetMenuItemID
GetDlgCtrlID
GetSubMenu
PtInRect
SetMenuDefaultItem
gdi32
Rectangle
GetWindowOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SetDIBits
BitBlt
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
RoundRect
GetTextMetricsW
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontIndirectW
RestoreDC
SaveDC
GetBkColor
DeleteObject
Polyline
CreatePen
Polygon
GetTextExtentPoint32W
SelectObject
CreateSolidBrush
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ExtractIconExW
comctl32
ImageList_AddMasked
ImageList_Draw
ImageList_GetImageCount
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_DragLeave
ImageList_GetIcon
olepro32
ord252
msimg32
GradientFill
shlwapi
PathCanonicalizeW
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
288KB
Virtual Size
287KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=43, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=929, id=1, productName=Unmarked objects,
count=86, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Gma.CodeCloud.Controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 385cd022a39d03a1c0703778ca403d33cc8303237ec8f4ac31dbbbd3308f4689
- MD5 3de62bad1e6c48d580425e900d961eb6
- SHA1 8d3be696489fe875308b79edea6eafa465b571fc
- SHA512 912705553264a88bbfece17bcf8cefc1f21367b5854a922e516e700c6c97a697c6a5f278d802d6c7108b01d851963746cb0a27c372b2fa841ebc53755be716d1
- SSDEEP 768:QQWg+SuVaJa7CQrWcZllAaiMmQ1pmLYcog3Vtc9qB:gg+1Ua7CQScCbGALR3Vtc4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\CloudControl\obj\Release\Gma.CodeCloud.Controls.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HTMLContentControlBridge.dll
- IMPHASH 1fe50ea8806963f5f51e5721f20cd2bc
- SHA256 aa509bd1d1804f0f1dfc08090ea9e4bf5eff69bf58921eddacd1ef6cbac163ff
- MD5 806f14d5f23d956158db2d3d1f6dee5f
- SHA1 3b52c9aef0f1aae5fd21b39608089f0ced14e53f
- SHA512 b62a5f45e47f50a123d0b33585ea06288e5781e82953d7891b94f90a12b3e35fa980941f876b5761d24ad1c88ffc3897145ee5be21ecafc92ac240df7eec927d
- SSDEEP 768:xXL45EtaYkWDpD6lG7luy2QUUw5vX6SXNz/MA43svzWZoqaVKasF/1LXuHS0YzmO:x745Et7k6W+ZUTMYLWzRNuHS0YzE87
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\HTMLContentControlBridge.pdb
vcruntime140
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
IsDebuggerPresent
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
Sleep
TerminateProcess
user32
MoveWindow
RegisterWindowMessageW
SetParent
DestroyWindow
DestroyIcon
SetWindowLongW
LoadImageW
mscoree
_CorDllMain
CreateContentInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=22, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=49, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HTMLContentControlCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4efa9af842d0a28674d0472294fba2b14993e81daf36697f97a3ba4f3c9c6a2c
- MD5 860746956c4c104516ef6ef7da12a4c3
- SHA1 263991f50b8bee175acb65593c381678ce954886
- SHA512 a4088f694b6fd6bedff27853812916ca529e65ddfdffad2f7564755cecd1ccb23fa617b58d50023b0f0ab3796f62d2a5774a9d7a3516bd61bf40652a075c94c3
- SSDEEP 768:UdRyYjcwbNsYF6vLBzXfPtG24mYz5lNkaiVH6d9/rYrrg5xK:UfsYFILBzXtG2wNka0a3CSxK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ContentControl\HTMLContentControl\HTMLContentControlCore\obj\Release\HTMLContentControlCore.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HTMLReportExporterBridge.dll
- IMPHASH 4ea7f8dbdf9e18c8ebaa5a4a5a9d6ec2
- SHA256 330fbf13d4a737246bc2bc203d8bb35a13ab46445d4e47a96e79151e86d23358
- MD5 e7a328e2c15ae09f7517d8cb82a7ecb4
- SHA1 a32edfd8e58cefe58568b088a364462498f6e414
- SHA512 eafc8a0629f487c941a7942d4577023edcf9ccb08dc484b0175b89e3edc15d86adaa02dbbe4d577881532ab9ac1d06443b1eb2eeae47273ca8bba2976ecdd60a
- SSDEEP 768:Sa0pcpkkyHS+vVSqLxnYZqgYetb2WHLEeY2HlyQTAYlTjjW:Sa0pcWkyy+vlFnYZqgYe/QeY2UYlTO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
14158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\HTMLReportExporterBridge.pdb
vcruntime140
__FrameUnwindFilter
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
GetCurrentThreadId
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
LoadLibraryW
Sleep
SetUnhandledExceptionFilter
user32
RegisterWindowMessageW
LoadImageW
mscoree
_CorDllMain
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=44, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HTMLReportExporterCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 53ccb2544766cd8de9ca7ed464c98cf1183e72ff2e18119bc34232f6e0eaa8ed
- MD5 33193798ef84aa9c1ce32036976be2c9
- SHA1 3ad2ceb4c472849049b9d2b2389ed6d6d0396412
- SHA512 be9ccdfca504cfd3dfb13b804c14294a62aba13902fc268f8be2d9900c3f7d7931c313116fc30bce3d728cc927a5eaa9dd9af03a37c5b77d9563e852eb76977c
- SSDEEP 1536:rYsHQTKd+Hgqhs4GPePzFmOMIFf2ucM+ny92e:rBmhjGPePzFmOMIFVcMhb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
116354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ImportExport\HTMLReportExporter\HTMLReportExporterCore\obj\Release\HTMLReportExporterCore.pdb
mscoree
_CorDllMain
Name
.text
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HtmlAgilityPack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2e5a483d988a1fb7b4d479a368d65be0cbbaf311514d62e67a0d94195d9bb62
- MD5 6089fa1b4ee55cac727d7acb7904a073
- SHA1 82e64738ce151d66b51f5d38e20f88050c1a3814
- SHA512 22ce9bf2d3b06642b7dca487ac66f380f1c08427b210af8d01a29a80fce7651a6c9483781d28e5430eadb89a8b18ea99abce3bc3d56e5d7e9851866a4079f8a6
- SSDEEP 3072:AhZ3/hwwBNqFAs3Z7mmqSbElNymzYEkHZevFXdp:Q3/hwwBNqFAs3WEmzR9X
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
161074
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jonathan\source\repos\HtmlAgilityPack\HtmlAgilityPack.Net40\obj\Release\HtmlAgilityPack.pdb
mscoree
_CorDllMain
Name
.text
Size
150KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ImageHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de76554607054788dc6f22cc8a19f1346ea0f91f62b4594d760319dabeddda8a
- MD5 5f8c8a566f34d432d31aeda624717448
- SHA1 b6c0498fc98f1fe038335579b01c8eb94c225091
- SHA512 818c1ca598c733b4ef33709750dc972246f8268f605ce60f7360d6e3c066eb44eb247f5ea7e921f7755c573c4c157b6fc6a3fb6eb7f05670cefe1ed53dd547b7
- SSDEEP 48:6VOmnyTDAFGcfwE0rth849MN3h8Mu5wWzivzSWoW7iiv1is9umWGe9Kb0Us:snyXufj0rthcI5tzivzMDiv17ekb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ImageHelper\obj\Release\ImageHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Install.Linux.txt
- SHA256 a5f4ff3eb86d8ed64a0a273559e1008f08ba93e76379dd79ec6a685dc52d37ea
- MD5 f06a5f19b246194f73bfe2c02eefdc98
- SHA1 df803da787b027bdc0c3253fe21d1c0f7b3d239a
- SHA512 8edd12589fb4397014af6f95ac9eaf7cbb7dd1e34e1b1149d06079af7f3a488031c48ecbbf0b977c28ecb82ba0ed75f7a5716455e2952c81a55625a54c7f877a
- MD5 SHA1 SHA512
Install.Windows.txt
- SHA256 7a9b29b26c5ed67df76b8b5e67ecc292ad2a64d1731bf78848e844e278ff888b
- MD5 6fab28e9ccb6f8e6cfd45a7cf9502992
- SHA1 bb74c41167998c011d770c84482ed602971e74b1
- SHA512 6fa9a8100261d7df389be1e6233d84da4f3bb8e7d1824498269fc941c89f4c2850d49a1cc7d676d63fae4d63e346abbe8018b0e250be689f3b971ccaae2a6310
- MD5 SHA1 SHA512
Itenso.Rtf.Converter.Html.dll
- SHA256 455ddeb2f75361856ffd9f27078d8af0446f44a82dca0df6f9236ccc8f8257a8
- MD5 e600103edb5d28843a23f6319211edbc
- SHA1 92cf2b3cb12e67d4cc5e5835166de708453a834d
- SHA512 503563304988a8eb584bfd45d2bd5c5470ec59c6b88334e1e21f7839557cd13564003fb33a9f891ef778234e20e99f4110044a5d8d7c87a2ba1fc9db0b671a7e
- SSDEEP 384:tx8NXR4hn9p3ls7dpdeM3IyI+B6TeWa0ubWZw8sa9GgX4efg:4NmnJs7Venyf0ubW98c4ug
- MD5 SHA1 SHA512 SSDEEP
Itenso.Rtf.Interpreter.dll
- SHA256 4e15e763e7338aee1966c42d68b2fec3ef65adb07719a1f8f33f2eee93e4e993
- MD5 5bd49f16b703be27fad4d7b176e76a33
- SHA1 65dade0fe2ed13891e86e0b848fef8537f36f0f0
- SHA512 f6f9b14c543e4aa6edbec52042b3c1782815294607139796af7209b4921e9963016450f1296156a87c875b32f9ec8dedd2eb3d7afce6883468d2b65aa801dd30
- SSDEEP 1536:WzbkQFLk2DjunOYMEnIPgw3owbMElW7sjl9Tv:eK2unOYMkC3xbDjlR
- MD5 SHA1 SHA512 SSDEEP
Itenso.Rtf.Parser.dll
- SHA256 37fe884f2beb40bde331f6b7ccd7e769d9ebc8b03ad5eb3e711571fae393ee94
- MD5 d84550c338e7087ae1a189218cea5a3d
- SHA1 cb3ca3384ad4bd58c2108eef7ccae21d1389a68f
- SHA512 b664fd1614265bbe1cb4bfd0cd7c044709b3c6f26712d116617199804f7ec165199be94f718c4097fed60fd68f0f252a989e7f83a18cf6920f5a8203a14ce130
- SSDEEP 768:F0tpyuVdMSQ88Moma6HKk5zA6RZc/Bj1EKxAlv341nA0NK:Reol6F5E6Rm/PEKWv3aA6K
- MD5 SHA1 SHA512 SSDEEP
Itenso.Solutions.Community.Rtf2Html.dll
- SHA256 930f7b47d141b76a8ef8d2c5ae5a754e26a803eb960ab9f71276b61056378841
- MD5 742f2d9e755e0eb125804600ea64e8c3
- SHA1 fb4c5ba9450e4cdb880df94cd5057870436533c3
- SHA512 798f299944138da0cc01e922acc1b0a33f30ad6f4803d327d04981352a95c63b1e4b5b528488bf651ffe551b2dfc49d84483f05ca6ede6a2f78a4417d43157f4
- SSDEEP 192:EUKN8357cjInv/yKtLZZwVsWj9iBEYR89p5bBrTIeodaAxSFDHwy:EUKNM57gI3ZtLZZw5j9Q8hBMzdaAxy
- MD5 SHA1 SHA512 SSDEEP
Itenso.Sys.dll
- SHA256 68161b13ff1994c93b171fc31cea8be56a674aac12b0eaac1ede52fcc75b7867
- MD5 e64a7e87ecbdae1e938a14eb3ec3c637
- SHA1 c30fb535a7967e6da2cbcbfcc29956840583f3a2
- SHA512 6d45cdaa88e6963b297bdedc662de8fc12025764259db4a9d3f518810d1454a4223596fb09ce44da5d670be2edaf90b48a1799dc387a7395733ec629eb012339
- SSDEEP 768:u8klDnn7Elez2XzZqmO7k9m9dI3yNLXNn5XfZjc1bi1:u8klDn7E5zDivZoA1
- MD5 SHA1 SHA512 SSDEEP
KanbanBoard.dll
- IMPHASH d43948a251dfc10c156a90f47698f872
- SHA256 bfb84eedb1fb1f8678db3a434e8b6a6269ed54c9ba51df6081b96662cd632062
- MD5 ce4334b5d99470993f6047f7c0cdd89d
- SHA1 8c0e78cefd1ded83b3448b5c52c3e996e9efe2d6
- SHA512 12ba8ba8397bddc118eae0011f6e086a6feac5889452a39a5ffb7ef9bbdb5270c1ed6749835f50b5eab452beef5e2b93abcb471bc2e903bcc527b4f0971014e5
- SSDEEP 6144:kfsA2cFckc4IHOoFd524FEmpWhD7Sp8693lKsioTkcoy19LiQRqP4BpmE4J0U:kkTEckcVHL7Emggp8qEqQcxRxpmaU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
320085
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3983
ord5857
ord6139
ord5815
ord3642
ord398
ord832
ord5590
ord6874
ord913
ord700
ord2810
ord5604
ord3434
ord2634
ord6211
ord812
ord6140
ord559
ord6871
ord2400
ord4215
ord2576
ord3649
ord2430
ord6266
ord1637
ord4396
ord537
ord3281
ord6003
ord6898
ord3296
ord3993
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord5261
ord4371
ord4992
ord2506
ord6048
ord1767
ord5283
ord4829
ord4419
ord2294
ord2293
ord6330
ord2932
ord4848
ord1197
ord5886
ord4370
ord5276
ord925
ord2805
ord3592
ord3568
ord641
ord324
ord4229
ord4803
ord942
ord6617
ord3087
ord4704
ord5945
ord2078
ord4470
ord4847
ord809
ord6279
ord6278
ord6868
ord5706
ord2755
ord3284
ord4158
ord807
ord554
ord556
ord1165
ord2822
ord5568
ord2910
ord940
ord4272
ord941
ord2567
ord4390
ord3569
ord2070
ord4199
ord3688
ord5783
ord4128
ord4292
ord5784
ord2088
ord3614
ord3292
ord4279
ord4120
ord1932
ord4265
ord6375
ord2862
ord3016
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord6168
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord755
ord6190
ord470
ord3629
ord1635
ord2445
ord2756
ord6920
ord6921
ord6919
ord6654
ord6655
ord924
ord859
ord4197
ord4184
ord2559
ord860
ord3805
ord6451
ord3049
ord836
ord6664
ord834
ord5929
ord3875
ord3420
ord3050
ord929
ord919
ord3747
ord3288
ord1173
ord4078
ord1930
ord3312
ord2072
ord3133
ord3871
ord3798
ord6195
ord5858
ord3867
ord2572
ord4394
ord3397
ord3625
ord682
ord3991
ord6115
ord4688
ord5142
ord1794
ord2081
ord1840
ord2574
ord3365
ord3635
ord693
ord4238
ord6238
ord6896
ord1088
ord6754
ord3905
ord6316
ord5949
ord3092
ord1792
ord4428
ord4369
ord4846
ord2505
ord293
ord4222
ord3740
ord4474
ord2442
ord768
ord489
ord1899
ord4253
ord4472
ord1808
ord5628
ord1761
ord4638
ord1764
ord6362
ord2405
ord2016
ord4212
ord2568
ord4391
ord3347
ord3572
ord692
ord4220
ord5259
ord4055
ord5263
ord1712
ord4752
ord1772
ord4042
ord5880
ord2916
ord2004
ord2858
ord5867
ord6174
ord291
ord3290
ord6150
ord2522
ord4360
ord4051
ord5467
ord4116
ord2381
ord1703
ord1708
ord5230
ord6365
ord5275
ord5058
ord5244
ord2436
ord3725
ord4263
ord6142
ord5080
ord6456
ord1126
ord4491
ord609
ord2423
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord6607
ord397
ord699
ord2144
ord1821
ord3605
ord656
ord3706
ord783
ord2104
ord6124
ord4224
ord816
ord562
ord6166
ord1863
ord2085
ord818
ord3737
ord2406
ord3621
ord3566
ord2444
ord1634
ord323
ord1633
ord5781
ord2745
ord640
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord4118
ord5830
ord2036
ord861
ord3898
ord2746
ord541
ord6193
ord2114
ord4282
ord289
ord5785
ord4124
ord613
ord4294
ord5977
ord5599
ord3976
ord3084
ord3909
ord5854
ord2099
ord2053
ord6136
ord6597
ord4018
ord5871
ord2373
ord4155
ord922
ord2854
ord2372
ord2706
ord2057
ord3995
ord3282
ord3792
ord3291
ord2371
ord2089
ord2855
ord2857
ord2115
ord4266
ord1933
ord2440
ord801
ord2836
ord384
ord341
ord810
ord686
ord654
ord3728
ord3393
ord4401
ord1143
ord3948
ord2859
ord561
ord815
ord3733
ord4616
ord3396
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6466
ord535
ord6390
ord5446
ord823
ord6379
ord5436
ord858
ord2606
ord540
ord538
ord5273
ord4270
ord616
ord800
ord825
ord567
ord3577
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4392
ord1768
ord4073
ord6051
ord2570
ord4213
ord2015
ord2403
ord937
ord3658
msvcrt
memset
_except_handler3
wcsncpy
_wcsnicmp
wcsncmp
memcpy
_strdup
setlocale
_wtoi
_wcsicmp
qsort
wcstod
memmove
wcscmp
_ftol
free
_wcsdup
_purecall
__CxxFrameHandler
_wsplitpath
_wmakepath
_wtol
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
kernel32
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleW
GetVersionExW
LCMapStringW
GetLocaleInfoW
lstrlenW
GlobalLock
GlobalUnlock
GetLastError
LocalFree
GetCurrentProcess
GetACP
lstrcpyW
LoadLibraryW
GetProcAddress
FreeLibrary
MulDiv
GetModuleFileNameW
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrcpynW
GetCurrentThread
LocalAlloc
GetCurrentThreadId
lstrcmpiW
SetLastError
VirtualQuery
InterlockedCompareExchange
VirtualProtect
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
DebugBreak
VirtualAlloc
user32
CallWindowProcW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
LoadImageW
DestroyIcon
DrawTextW
LoadMenuW
SetWindowLongW
CreatePopupMenu
AppendMenuW
ClientToScreen
SetCapture
ReleaseCapture
SetWindowTextW
IsRectEmpty
GetWindowRect
IsWindowVisible
UpdateWindow
GetDC
ReleaseDC
GetMessagePos
PostMessageW
DragDetect
ScreenToClient
PtInRect
GetParent
OffsetRect
CopyRect
GetFocus
InflateRect
GetSysColor
GetClientRect
LoadIconW
GetSystemMetrics
EnableWindow
SendMessageW
RegisterWindowMessageW
ShowScrollBar
DrawFocusRect
DeferWindowPos
SetWindowPos
EndDeferWindowPos
BeginDeferWindowPos
GetNextDlgTabItem
IsChild
SetScrollPos
ScrollWindowEx
GetScrollPos
SetRect
CopyIcon
GetDlgItem
LockWindowUpdate
RegisterClipboardFormatW
DrawFrameControl
GetClassNameW
MapVirtualKeyW
GetKeyNameTextW
SystemParametersInfoW
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
GrayStringW
MapDialogRect
GetWindowDC
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenuDefaultItem
RedrawWindow
GetSysColorBrush
FillRect
SetParent
InvalidateRect
IsWindowEnabled
TabbedTextOutW
SetTimer
GetWindow
GetLastActivePopup
GetForegroundWindow
GetDlgCtrlID
KillTimer
GetKeyState
EqualRect
LoadBitmapW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetWindowLongW
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SetRectEmpty
WindowFromDC
IntersectRect
IsWindow
DrawTextA
GetTabbedTextExtentW
SetCursor
GetCapture
LoadCursorW
gdi32
SetBkMode
SetTextColor
Polyline
SetDIBits
GetWindowOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetDIBits
GetBkColor
CreatePen
RoundRect
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
RestoreDC
SaveDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
GetTextMetricsW
GetTextExtentPoint32W
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
comctl32
ImageList_DragEnter
ImageList_EndDrag
ImageList_DragMove
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Draw
ImageList_DrawEx
ImageList_BeginDrag
olepro32
ord252
msimg32
GradientFill
shlwapi
PathCanonicalizeW
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
340KB
Virtual Size
339KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=44, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=945, id=1, productName=Unmarked objects,
count=90, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
LinkLabelEx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0da406fcab54272b896917b830b53c23127010c95aad495f5ca4c4593e1c99b
- MD5 407fc19d87b47e0fbfe94a1a966b3d06
- SHA1 eebf28ebf23dfe690f10dfd4b03ffeb5d6396786
- SHA512 b3e8582f920472dc1f85205e8deada7033b8fe711897eba6c58864170e2fa6c464c114be379f9ac471378ecf1816940714e3c6575346c02a1172dc2fe10104ca
- SSDEEP 48:66Cd91aqGsgBkqlzgcXBzzN+XwVL4XS6TNMxzQoWCy+jJfrE/diqr0u4td7l3XPF:yaZsgiq5gEB/og0S6MzQoWCVI/ddcl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\LinkLabelEx\obj\Release\LinkLabelEx.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MDContentControlBridge.dll
- IMPHASH 1fe50ea8806963f5f51e5721f20cd2bc
- SHA256 880b908e4852ce8f9376a5a440470ceaf5ace7fe3fb53dbd9e7907e584a95f81
- MD5 c6ce6bc6b1caf3718b510cde80aad010
- SHA1 988bc4222c112874733482f4d306129f5b308b4b
- SHA512 0fef60301100aaf90f6128b43f4beb63f2ed4b41a6aa6f4c7e4b3c738da8de272d7db28dbe0b10d8c586050091d5bbf591ca62e6b9088f334e16c880b68a9ded
- SSDEEP 768:X1Fy4oklvFtBbquy2QUUw5vX6SyvndTJwZ31jky8R6xxAtfGh+M/ga4dw5LVOfgT:X1Fjok1/IRtOhrnOfgYzua3yF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
15254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\MDContentControlBridge.pdb
vcruntime140
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
IsDebuggerPresent
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
Sleep
TerminateProcess
user32
MoveWindow
RegisterWindowMessageW
SetParent
DestroyWindow
DestroyIcon
SetWindowLongW
LoadImageW
mscoree
_CorDllMain
CreateContentInterface
GetInterfaceVersion
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=22, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=49, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
MDContentControlCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46226c8cf5d8a1d7d1367e510ea729888158d834e4b3d646a10c2e957c256b6b
- MD5 2848ea500005f7eb59c89f9cc56a6ff1
- SHA1 31cc10d228091bdb9f94673b94cf6f37cb8f9f1a
- SHA512 8532a39fcca3a096834df613a70134298dde4510afdcae3b42186b2653e2c693c899813aa68f661773a9cecc93c625a3bf2ea0db247163377c2d7e0971908056
- SSDEEP 384:dDCazMfc8tU7lMxWiLWMAySrb50BQeXvXSNs/p1nZf5lk3f4W/:PYnWMhAbKBzXSSfnZf5lC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ContentControl\MDContentControl\MDContentControlCore\obj\Release\MDContentControlCore.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MLOImport.dll
- IMPHASH d73b563520be33f3591d08e0846b182d
- SHA256 d1c418f91378f9ab2ac46b538f2c6e4d9566eeb252326fbc006757d92629088e
- MD5 3117e90357618b317b8a7c813e250a45
- SHA1 fd620b2dbf47f89071827b28c01ba24b91ccfc8f
- SHA512 116234ce2d1f85bdd263a730f9bd09b7a2e2361979650156db5a81b7bc4e3302af43143a135a78e56f195c5bafc0ae2f194d4ade6640ee98b5103c8306f4e964
- SSDEEP 1536:QYK2+nQEt5Kfv+Q6sfuHPzMlPmDaWPdYxAZh1vp9r8K:RK2a9t5KFfuvglNqh9YK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55176
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord927
ord2822
ord5210
ord6664
ord834
ord5929
ord3805
ord1165
ord925
ord5857
ord665
ord354
ord2805
ord533
ord6381
ord2914
ord5462
ord1863
ord6139
ord859
ord6874
ord2776
ord6919
ord6921
ord6278
ord6279
ord2910
ord5568
ord2755
ord6390
ord6379
ord5436
ord5446
ord4197
ord6868
ord541
ord801
ord926
ord2756
ord6655
ord5706
ord922
ord798
ord3171
ord3175
ord1989
ord3719
ord3506
ord3178
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord2912
ord2810
ord5852
ord2606
ord2099
ord2836
ord537
ord6654
ord4124
ord940
ord4273
ord861
ord942
ord4272
ord941
ord3658
ord6466
ord823
ord815
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord3396
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord3948
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord398
ord540
ord3434
ord700
ord535
ord4199
ord913
ord858
ord538
ord800
ord1115
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord825
msvcrt
__dllonexit
??1type_info@@UAE@XZ
_onexit
_initterm
_adjust_fdiv
malloc
_mbschr
fgets
fgetws
_CxxThrowException
_wmakepath
_wsplitpath
wcschr
swscanf
setlocale
_strdup
wcstod
free
wcslen
_wtoi
iswdigit
_wcsicmp
wcscmp
__CxxFrameHandler
_purecall
kernel32
CloseHandle
DeleteFileW
GetACP
lstrcpyW
MulDiv
GetDateFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetTimeFormatW
LCMapStringW
WideCharToMultiByte
GetLocaleInfoW
lstrlenW
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
GetCurrentProcess
InterlockedDecrement
GetTickCount
SetEndOfFile
GetFileSize
GetLastError
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
ExpandEnvironmentStringsW
GetModuleFileNameW
LocalAlloc
InterlockedIncrement
MultiByteToWideChar
lstrlenA
user32
LoadImageW
GetDC
ReleaseDC
DestroyIcon
RegisterClipboardFormatW
gdi32
GetDeviceCaps
advapi32
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
OleRun
oleaut32
GetErrorInfo
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathCanonicalizeW
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
60KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=15, id=19, version=8022,
count=33, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=478, id=1, productName=Unmarked objects,
count=36, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
MSDN.HtmlEditorControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f1a248e38646a9d786d2fc013ae15b2c729c03bc3018e4eb760d578f38727b6
- MD5 079b2cac6f8baea023e4e73eb213d8cd
- SHA1 0e19849ff3ec9783c33f78228a1a27078be28e45
- SHA512 883b5141edc0932d6daf8f7de06f53064bd0cf42e8a62c7426cd15d345f17851483dc0c62a491d5fbcc18ef0f8cb6757eac3a77c1721e72a7d4b1d89cca90ff1
- SSDEEP 6144:bm7ylD8UHDfLict2AHfBzPTJatczRdCLpO:bfD8UjDKAHflstczRdCLw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
318106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\MSHtmlEditorControl\obj\Release\MSDN.HtmlEditorControl.pdb
mscoree
_CorDllMain
Name
.text
Size
304KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Markdig.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d89070906432dfa0697aaa68b8e87633c532a6d60064f5a1e82279ca2f4a369c
- MD5 2a63014910d5bfd40cd4ecab640c0d73
- SHA1 7243d470388b87af6ef8dc57d5d3b4c4955a2873
- SHA512 838212871d6f3e337576b593657a247c909f982e087badf94c75e8026d5a79081ff9c5ec0cfe380497f962d6811bf26cafabc8b76c935e74c9436fcd957209f3
- SSDEEP 6144:ylYjz1aL90snh6p4hKHSpK3rOPV1PIYtyeG9EaBg+VWzy:ylmqKgh6GKoSBg+V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
408122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\markdig\markdig\src\Markdig\obj\Release\net40\Markdig.pdb
mscoree
_CorDllMain
Name
.text
Size
391KB
Virtual Size
390KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.VisualStudio.OLE.Interop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d7431df4be7a006b818a2c5bd85d4189caea1a798fe6a422cca2a4dbda80d70
- MD5 818e50041315bc2264a5c5b17479d0b8
- SHA1 60f9f456fa4068a5f97b3dc1b192d6599ff3cf4d
- SHA512 873768a6062f0c46591767f2947534f69b54495102954980817ca7be7e6617d9517af7d7042f1cad8071278ec0560de70eec869bdf0d058c0fb4ac9fb687bec7
- SSDEEP 3072:mB4SGu9A07O5tp+zcKow+YhYZq1oj6ii8oDgpyd/v6t8oV:mKSv20q5tp+Abw+YhYZq1ojlh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
112846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
104KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MindMapUIExtensionBridge.dll
- IMPHASH 20ebf8492161cdd29f7605670267db96
- SHA256 3b440a033a0303bd559cb32dede582439ae6bc5c776a0bd492f94048f7f8dc8f
- MD5 e8c49f0b84c2a803d211e8b280b933cc
- SHA1 da846cf521d6c248fdfcbeba65ccb0f8a6cfebb4
- SHA512 b57602480eb5be1b4b58bf1c05ffb5475959b4b30416fc0d4acb9851b9a87898c3991069d8801d03aa1aba5f0539833b17828e6d2605ba54716154873cf74b3c
- SSDEEP 1536:Wfd4+FCkD+7x2Euys0x43qY2CPFcVWV3:W5Tes0x43qYZPFk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\MindMapUIExtensionBridge.pdb
vcruntime140
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
LoadLibraryW
Sleep
GetCurrentProcess
user32
RegisterWindowMessageW
DestroyWindow
LoadImageW
MoveWindow
SetWindowLongW
SetParent
mscoree
_CorDllMain
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
712B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=48, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
MindMapUIExtensionCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 73918aaa9acd252169308c8e9e8e59e726ce105bcbee20e0e057690999d1c4da
- MD5 e3c9df50b46ae13d2f23c8a4006b311b
- SHA1 ed94ebb7466cf5dbe05fefb98810ccc0a39cd614
- SHA512 a3a1e04cc2042f727aec4bb453b6419e0f4becb657246fcd67cf3ceac2ed204ff52a06913b702a55cacbfc71cd5ba3e50dc038cccd6d4b87592970989c70fcda
- SSDEEP 768:2hp53Ub0uG3tY+SubP1Az133eO+rr9X+IjZg79aPOtgdtCu3Q0RCG2C/wY:4H2DG3ti+A5Wrr9fE4RCGdwY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\UIExension\MindMapUIExtension\MindMapUIExtensionCore\obj\x86\Release\MindMapUIExtensionCore.pdb
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MySpellCheck.dll
- IMPHASH 7b04dc4adf59543e58f7000066e4d579
- SHA256 f122c2523425da323d23a375b37fe427527ef5dc671e77106458039397688052
- MD5 684096b13a3bb4231c11878b501c43d2
- SHA1 b17fa47d74dcbc8cf91e96e52c78dbc679287d88
- SHA512 ee712c2f9d0b4e07f2748936b645ec5921380db11cc41f063637d6eb4015c0a4caedc2b08a3e528bd1f243ec2acabe65b37ac22a20025e32e1962cb3cb026ea5
- SSDEEP 768:Xv/NsSsyVEGEE6IWDfttYLFjXrLPlRhm6PRp9lRqsRwj38:Xns8SttYLFjXrLPC8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19351
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileAttributesW
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
msvcrt
fflush
fprintf
_iob
??3@YAXPAX@Z
fclose
strncmp
fgets
fopen
strcmp
strlen
atoi
malloc
??2@YAPAXI@Z
memchr
strcpy
strchr
calloc
_strdup
strstr
abs
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
free
memcpy
__CxxFrameHandler
CreateSpellCheckerInterface
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
360B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=19, version=8034,
count=34, id=1, productName=Unmarked objects,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
PDFExporterBridge.dll
- IMPHASH 4ea7f8dbdf9e18c8ebaa5a4a5a9d6ec2
- SHA256 425b876f80fca3c1ad8108225b2335bae900938856fc4e42200380bfa8aae006
- MD5 3973a6a1ce4cb3f219c7ed40f71832b5
- SHA1 b2a793db183436757dc5755546bb843f9855f05a
- SHA512 707def37aad70d3951dd1478e298ff5522787f00ba8ef362d2d7462913c9107be882bcbf9d75669ae51bf6784598d75585e5f2316413bf5f1396c3d83824aa5b
- SSDEEP 768:S81D0gukyjS+vmXSHzorF5bQTKabnL2qF9JY2blyQ9GYdxjj0:Se0Fkym+vRorF5mLJY2QYdxc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
14142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\PDFExporterBridge.pdb
vcruntime140
__FrameUnwindFilter
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
GetCurrentThreadId
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
LoadLibraryW
Sleep
SetUnhandledExceptionFilter
user32
RegisterWindowMessageW
LoadImageW
mscoree
_CorDllMain
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=44, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
PDFExporterCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75936448b913f899824d4593e2455f6a084eabf074ff8e85a4149dd23ebf5f11
- MD5 f6a04b4284b2fb7ae7886f8c249cf550
- SHA1 1a38d79bfb655525a5dbc20f1b385128a258343c
- SHA512 db5c7fd645f0576f6738eeecfcc691b5a9f3b6b1567c190d873f13fd20de03343dd0cc7594bbae176a12536aedd1bc6e292fc5e1b4513c95edc11d4be069f451
- SSDEEP 384:8I6EPiD1sq70EQ1SGx8K1/KG8aXxp5e1ImiqUZZcHZ/nFqmrOEXgD7I9PvCMyH1T:8fEPaKE0tTmOmrDS7gi1nV4b0kgppZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ImportExport\PDFExporter\PDFExporterCore\obj\Release\PDFExporterCore.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
PlainTextImport.dll
- IMPHASH 26340b4667312143ecc66bd3015dfaec
- SHA256 1efaf51f14c823144b80f07c9cd8bd0d9c97d68a751b06cef23bc13817881a2d
- MD5 d7e01beb3afc9d284289cfa6989ce2bb
- SHA1 495938823dbe4c59440df51dbfbeb20b306dfdcc
- SHA512 ba01f609579b690856984ba30a342dfd455226ae7e783281bcefae0787213e36f8b2e096f28faecf1ddbc4adc2c4785764e7a1156a7c11ca0f07496ae6b62684
- SSDEEP 768:TrlDVPNv/TIiNNn5MFF6f692f6WZdSkEFZ8lt:T1bvk0R5MFF+E6BBEob
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3948
ord3396
ord4616
ord3733
ord561
ord815
ord823
ord6655
ord537
ord5568
ord2910
ord1173
ord3658
ord2836
ord2810
ord2606
ord2099
ord5446
ord5436
ord6379
ord6390
ord4124
ord4272
ord2756
ord6279
ord6278
ord6921
ord6919
ord1165
ord3131
ord397
ord699
ord5298
ord533
ord6381
ord1808
ord4224
ord2914
ord5462
ord1863
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord3577
ord4418
ord3397
ord5286
ord4392
ord1768
ord6051
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord940
ord6868
ord941
ord798
ord3719
ord3506
ord3171
ord3178
ord3175
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord1989
ord2912
ord535
ord6466
ord942
ord859
ord4704
ord6195
ord5949
ord4229
ord2294
ord2362
ord2290
ord2293
ord861
ord3312
ord536
ord858
ord825
ord324
ord567
ord540
ord538
ord4155
ord641
ord616
ord800
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord2570
ord4213
ord2015
ord2403
ord1115
msvcrt
_wtoi
_purecall
__CxxFrameHandler
wcscmp
wcslen
free
wcschr
_CxxThrowException
fgetws
fgets
_mbschr
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
kernel32
LocalAlloc
GetACP
MulDiv
MultiByteToWideChar
WideCharToMultiByte
LocalFree
lstrlenW
user32
EnableWindow
RegisterWindowMessageW
GetDC
RegisterClipboardFormatW
ReleaseDC
SendMessageW
gdi32
GetDeviceCaps
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=34, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=591, id=1, productName=Unmarked objects,
count=36, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
PluginHelpers.dll
- IMPHASH d20a95f336c06329af7ff2ea7ce9e3e2
- SHA256 717eb558544948fdf66ee14a4308683e8fc792730b0b660823815ccaf08f5d99
- MD5 a5a6e74aecb51a00828f3463b1460a9b
- SHA1 5c89c7a4089df0cceb7c9e1a6e148f5661bb0e1e
- SHA512 83a294aa57d0aaa6f4a772b93cd062e8af57e08de2076ebbb31e39e356be5d0dbd9bc548b79aadc46f138e1c77fddcfe42b85b0ba0e830a4841dcfaf7a91f5d5
- SSDEEP 6144:sqGBAILUOPeMKDPJTh5PyRQj6fGBSzKMSi:sq6LfeMqJdGwUR7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
189844
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\PluginHelpers.pdb
kernel32
FreeLibrary
GlobalSize
GetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
Sleep
lstrcpyW
GlobalUnlock
GlobalLock
MoveFileExW
FileTimeToSystemTime
GlobalAlloc
GlobalFree
LocalFree
FormatMessageW
WideCharToMultiByte
LCMapStringW
GetLocaleInfoW
LocalAlloc
MulDiv
GetACP
GetVersionExW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
GetCurrentProcess
WaitForSingleObject
CloseHandle
lstrcpyA
GetTimeFormatW
GetTempPathW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateDirectoryW
ExpandEnvironmentStringsW
LoadLibraryW
MultiByteToWideChar
lstrlenW
DecodePointer
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
OutputDebugStringW
DeleteCriticalSection
mfc140u
ord5882
ord13028
ord8776
ord8773
ord4881
ord3869
ord6579
ord1171
ord540
ord1179
ord2753
ord14573
ord3874
ord2994
ord6795
ord4477
ord3970
ord2534
ord2257
ord1182
ord12691
ord1655
ord8505
ord551
ord6592
ord2256
ord3182
ord1068
ord362
ord4648
ord13085
ord13086
ord3957
ord258
ord3316
ord846
ord261
ord4856
ord3236
ord3849
ord8757
ord8719
ord1687
ord1524
ord12643
ord14461
ord8499
ord4312
ord2899
ord4806
ord1711
ord13053
ord14623
ord12367
ord11971
ord11972
ord5893
ord6332
ord1449
ord973
ord6837
ord5114
ord1142
ord14606
ord13669
ord5585
ord5588
ord5581
ord500
ord8464
ord4834
ord8360
ord8756
ord14410
ord14409
ord14417
ord12884
ord4664
ord12762
ord2996
ord5117
ord1653
ord7069
ord5422
ord1185
ord554
ord8712
ord8225
ord13258
ord13257
ord13964
ord7027
ord9468
ord4882
ord14416
ord4663
ord1692
ord290
ord12559
ord5109
ord2389
ord4890
ord5322
ord8817
ord14137
ord1511
ord883
ord12569
ord845
ord6489
ord8345
ord7820
ord5419
ord1450
ord974
ord14657
ord12405
ord14604
ord12348
ord14411
ord12763
ord2990
ord5921
ord1690
ord1689
ord1525
ord1523
ord287
ord280
ord285
ord3009
ord4323
ord2378
ord2383
ord2385
ord266
ord265
ord2304
ord2345
ord7654
ord6220
ord13756
ord3305
ord3302
ord10255
ord8210
ord2761
ord1476
ord14785
ord10285
ord10287
ord10286
ord10284
ord10288
ord5652
ord11725
ord11726
ord9139
ord12089
ord3838
ord3833
ord11936
ord14588
ord8965
ord12220
ord6978
ord11392
ord11002
ord9256
ord3266
ord13878
ord12262
ord12258
ord1722
ord1744
ord1770
ord1756
ord6751
ord1513
ord296
ord286
ord1045
ord4815
ord2246
ord2390
ord6566
ord2522
ord1777
ord4936
ord5003
ord4948
ord4966
ord4960
ord4954
ord5013
ord4997
ord4942
ord5019
ord4974
ord4912
ord4927
ord4988
ord4502
ord5790
ord9693
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord1514
ord325
ord1053
ord2365
ord324
ord1052
ord2408
ord2411
ord2376
ord2410
ord485
ord2268
ord2374
ord2184
ord2300
ord2399
ord8123
ord12430
ord2209
ord13544
ord11717
ord13703
ord5935
ord2682
ord12124
ord3941
ord3371
ord3372
ord3265
ord12168
ord4886
ord1002
ord5533
ord6973
ord6865
ord5249
ord5549
ord5760
ord9350
ord5525
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord8219
ord9209
ord1391
ord890
ord13070
ord1108
ord4171
ord4649
ord1663
ord8182
ord2255
ord269
ord1043
ord2284
ord2242
ord6493
ord3146
ord13335
ord5172
ord10293
ord8742
ord4992
ord5007
ord4931
ord1713
ord9297
ord9377
ord3147
ord2993
ord3872
ord9128
ord8186
ord12126
ord12134
ord9127
ord2660
ord2768
ord10624
ord7485
ord2540
ord3971
ord884
ord1559
ord3954
ord7073
ord1070
ord8365
ord8811
ord5210
ord13022
ord14123
ord14127
ord13019
ord14112
ord8881
ord14115
ord13694
ord14047
ord13293
ord13289
ord13087
ord13095
ord12867
ord12953
ord450
ord12578
ord12558
ord13775
ord13261
ord2520
ord6528
ord6486
ord3882
msimg32
GradientFill
shlwapi
PathIsRelativeW
PathIsURLW
PathCanonicalizeW
PathCreateFromUrlW
vcruntime140
_purecall
memmove
wcschr
wcsstr
__vcrt_InitializeCriticalSectionEx
__FrameUnwindFilter
__CxxUnregisterExceptionObject
__CxxDetectRethrow
_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
memset
__CxxRegisterExceptionObject
memcpy
__std_terminate
__CxxExceptionFilter
__CxxQueryExceptionSize
__CxxFrameHandler3
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_crt_atexit
terminate
_execute_onexit_table
_register_onexit_function
_seh_filter_dll
abort
_errno
_configure_narrow_argv
_invalid_parameter_noinfo
_initialize_onexit_table
_cexit
_initialize_narrow_environment
api-ms-win-crt-string-l1-1-0
_wcsdup
_wcsnicmp
_wcsicmp
iswdigit
wcsncmp
_strdup
strncmp
api-ms-win-crt-stdio-l1-1-0
fgetws
fgets
__stdio_common_vswprintf_s
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstod
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_wsplitpath_s
api-ms-win-crt-time-l1-1-0
_localtime64_s
_time64
api-ms-win-crt-utility-l1-1-0
ldiv
api-ms-win-crt-locale-l1-1-0
setlocale
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
_except1
user32
IsRectEmpty
GetForegroundWindow
IntersectRect
GetWindowRect
GetSystemMetrics
ScreenToClient
SetCursor
RegisterClipboardFormatW
CloseClipboard
IsWindowVisible
GetMessagePos
LoadCursorW
GetParent
PtInRect
OffsetRect
InflateRect
DrawFocusRect
GetSysColor
GetClientRect
InvalidateRect
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
EnableWindow
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetClassInfoW
DefWindowProcW
EnumClipboardFormats
DrawFrameControl
GetWindowLongW
DestroyIcon
DispatchMessageW
GetDlgItem
MessageBoxW
PostMessageW
CopyRect
IsWindow
SetWindowPos
EmptyClipboard
IsDialogMessageW
SystemParametersInfoW
GetClipboardFormatNameW
WindowFromDC
GetDC
ReleaseDC
GetDesktopWindow
LoadImageW
DrawIconEx
GetScrollPos
GetTopWindow
SetForegroundWindow
MapDialogRect
GetIconInfo
GetClassNameW
RegisterWindowMessageW
TranslateMessage
PeekMessageW
OpenClipboard
SetClipboardData
UpdateWindow
GetClipboardData
SendMessageW
SetWindowLongW
CallWindowProcW
gdi32
SetDIBits
GetObjectW
SaveDC
RoundRect
RestoreDC
GetStockObject
GetDIBits
GetDeviceCaps
DeleteObject
GetTextExtentPoint32W
Polygon
ExtTextOutW
TextOutW
SelectObject
Rectangle
RectVisible
PtVisible
IntersectClipRect
Escape
CreateSolidBrush
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CopyMetaFileW
advapi32
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
GetTokenInformation
shell32
ExtractIconExW
ShellExecuteW
SHGetSpecialFolderPathW
oleaut32
OleCreatePictureIndirect
VarUdateFromDate
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
VariantClear
comctl32
ImageList_Create
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_Destroy
ImageList_DragLeave
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Add
_TrackMouseEvent
api-ms-win-crt-multibyte-l1-1-0
_mbschr
mscoree
_CorDllMain
Name
.text
Size
190KB
Virtual Size
189KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
76B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=261, version=23013,
count=8, id=259, version=24123,
count=13, id=260, version=24123,
count=34, id=261, version=24123,
count=4, id=257, version=24123,
count=7, id=206, version=65501,
count=1, id=208, version=65501,
count=29, id=203, version=65501,
count=950, id=1, productName=Unmarked objects,
count=90, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
RTFContentCtrl.dll
- IMPHASH 976b1e5967f614893b87920de27ff690
- SHA256 dc2f77a5c7e690a2d5b9727e1182d2d4d7568691647ecc5cb077fa65e8ef3333
- MD5 2a24628cb64ea54f08cc219a5c028c37
- SHA1 7b85b2e8eaffc81150edc2f3420cf317259f9d4c
- SHA512 648d3fcc5851ff150a24a8cb0a173b835d4c39c6e73ab246dc45064fb78c653273703770be5c44ef7e2c0d58493aa0ccb78ebbda42f9021ae03290b93265e1c8
- SSDEEP 6144:yHR7PBgEErFHLwlg6TbXP25opc1TQMgVbwNibaqf54jfLof/5K:yxvULiXP2+uT4VbwA94fD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
230321
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3312
ord4294
ord823
ord6597
ord2854
ord4155
ord4803
ord942
ord6130
ord6466
ord3870
ord3867
ord4215
ord2576
ord3649
ord2430
ord6266
ord2858
ord812
ord5858
ord559
ord801
ord541
ord2756
ord4197
ord2606
ord858
ord941
ord940
ord5568
ord2914
ord1637
ord1143
ord815
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3396
ord4616
ord3733
ord561
ord3948
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord3703
ord6124
ord3747
ord4688
ord1196
ord2644
ord1662
ord1165
ord3792
ord1749
ord4369
ord4846
ord3351
ord3613
ord357
ord472
ord4282
ord5977
ord860
ord3749
ord6115
ord5784
ord2508
ord361
ord6211
ord2822
ord2910
ord922
ord2755
ord6278
ord3805
ord6279
ord926
ord6921
ord925
ord4124
ord4272
ord5679
ord6874
ord5857
ord6139
ord5604
ord665
ord354
ord6654
ord2805
ord2912
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord798
ord1989
ord2800
ord533
ord537
ord6381
ord6867
ord6918
ord6919
ord927
ord3211
ord4037
ord2444
ord686
ord2088
ord384
ord2745
ord4199
ord6920
ord4273
ord2776
ord6655
ord924
ord859
ord913
ord4184
ord2036
ord2099
ord3898
ord5785
ord5871
ord3568
ord3688
ord5783
ord3614
ord2836
ord2440
ord5446
ord5436
ord6379
ord5830
ord6390
ord807
ord554
ord2400
ord4263
ord2857
ord4158
ord6142
ord3284
ord5080
ord2706
ord6456
ord6140
ord1126
ord4491
ord2634
ord1173
ord4078
ord1930
ord6193
ord3133
ord3871
ord3798
ord6195
ord6871
ord4279
ord535
ord2114
ord5706
ord556
ord1088
ord6174
ord291
ord2567
ord4390
ord3569
ord2070
ord2550
ord5506
ord5571
ord433
ord464
ord1640
ord429
ord539
ord6437
ord6433
ord768
ord489
ord1899
ord4253
ord6451
ord4472
ord1808
ord700
ord398
ord5628
ord1761
ord781
ord536
ord1262
ord3758
ord2373
ord4127
ord3056
ord703
ord404
ord857
ord2133
ord2456
ord434
ord465
ord2385
ord1649
ord1826
ord5061
ord4629
ord4601
ord4710
ord4744
ord4602
ord5010
ord2507
ord4828
ord355
ord4224
ord6399
ord3447
ord3517
ord3443
ord1657
ord2078
ord4042
ord432
ord1792
ord4428
ord2505
ord293
ord4222
ord3740
ord3629
ord1635
ord2445
ord397
ord699
ord2862
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord609
ord2372
ord2423
ord2082
ord3450
ord816
ord562
ord4283
ord4280
ord1932
ord4265
ord6375
ord3016
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord2057
ord3706
ord783
ord2104
ord5142
ord1764
ord6362
ord2405
ord2016
ord4214
ord2573
ord4395
ord3634
ord692
ord2144
ord5945
ord5462
ord1863
ord3687
ord1230
ord283
ord5787
ord4028
ord3084
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord3092
ord540
ord2810
ord6868
ord5949
ord4229
ord2293
ord2350
ord800
ord825
ord324
ord538
ord641
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord6617
ord5867
ord6060
ord2004
ord2916
ord5880
ord2072
ord2855
ord3725
ord2436
ord5244
ord5058
ord5275
ord6365
ord5230
ord1708
ord1703
ord2381
ord4116
ord5467
ord4051
ord4360
ord2522
ord6150
ord3290
ord2371
ord6136
ord5854
ord470
ord2859
ord323
ord1634
ord1633
ord5781
ord2746
ord4118
ord3915
ord2559
ord5869
ord6168
ord5790
ord4292
ord4128
ord2406
ord640
ord755
ord3658
ord3621
ord3566
ord289
ord613
ord4270
ord341
ord818
ord654
ord3737
ord2294
ord567
ord616
ord3577
ord4418
ord3397
ord5286
ord4392
ord1768
ord6051
ord2570
ord4213
ord2015
ord2403
ord861
ord4704
ord6330
ord809
ord3087
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
msvcrt
_wcsicmp
wcschr
_wsplitpath
_wmakepath
wcsncpy
memset
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
wcscmp
memcpy
_purecall
_ftol
_wtoi
calloc
__CxxFrameHandler
_mbschr
fgets
fgetws
_CxxThrowException
iswdigit
_wcsnicmp
wcsncmp
wcslen
free
wcstod
_strdup
setlocale
swprintf
isspace
_wtol
strncpy
memmove
strncmp
malloc
wcsstr
toupper
_wcsdup
kernel32
SetLastError
GlobalSize
GetDriveTypeW
GetVersionExW
LocalAlloc
lstrcpyA
GetVersion
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
GetACP
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GlobalFree
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpW
LoadLibraryW
GetCurrentProcess
GetModuleFileNameW
CreateProcessW
ExpandEnvironmentStringsW
GetTempPathW
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
GetLastError
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetLongPathNameW
SetFileAttributesW
CloseHandle
DeleteFileW
MoveFileExW
GetModuleHandleW
GetProcAddress
lstrlenW
lstrcmpiW
GetCurrentThreadId
lstrcpyW
lstrcpynW
user32
IsClipboardFormatAvailable
GetClipboardFormatNameW
SetParent
wsprintfW
CallWindowProcW
SetWindowLongW
MapDialogRect
SetActiveWindow
SetFocus
SetWindowPos
GetForegroundWindow
GetLastActivePopup
TabbedTextOutW
GrayStringW
GetScrollPos
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
GetCapture
DrawEdge
SetCapture
InvalidateRect
UpdateWindow
RedrawWindow
GetParent
GetClientRect
InflateRect
SetRect
GetSysColor
SendMessageW
EnableWindow
RegisterWindowMessageW
GetWindowDC
LoadBitmapW
GetIconInfo
GetWindowLongW
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SetRectEmpty
IsRectEmpty
ScreenToClient
IsWindow
GetKeyState
MapVirtualKeyW
GetKeyNameTextW
PeekMessageW
DispatchMessageW
TranslateMessage
EnumClipboardFormats
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
GetDC
ReleaseDC
GetDesktopWindow
DrawIconEx
LoadImageW
DestroyIcon
DrawTextW
OffsetRect
MessageBeep
ShowCaret
KillTimer
SetTimer
GetDlgCtrlID
SetMenuDefaultItem
SetMenuInfo
CopyIcon
IntersectRect
SystemParametersInfoW
GetSystemMetrics
PtInRect
GetWindowRect
GetClassNameW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
RemoveMenu
DestroyMenu
GetMenuItemCount
GetMenuItemID
InsertMenuW
LoadCursorW
SetCursor
CloseClipboard
GetNextDlgTabItem
IsWindowVisible
GetFocus
IsChild
IsDialogMessageW
LoadMenuW
GetMenuStringW
PostMessageW
GetSubMenu
GetMenuItemInfoW
SetMenuItemInfoW
IsWindowEnabled
GetMessagePos
GetWindow
GetDlgItem
GetTabbedTextExtentW
GetCaretPos
ClientToScreen
DeleteMenu
DestroyWindow
RegisterClipboardFormatW
CopyRect
ShowScrollBar
ReleaseCapture
gdi32
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
EnumFontsW
CopyMetaFileW
GetDIBColorTable
CreatePalette
RealizePalette
Rectangle
DeleteDC
CreateDIBSection
CreatePen
CreateSolidBrush
RoundRect
GetTextMetricsW
CreateFontIndirectW
SetDIBits
GetDIBits
GetObjectW
DeleteObject
GetTextExtentPoint32W
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
BitBlt
advapi32
RegQueryValueExW
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
RegEnumValueW
GetTokenInformation
RegDeleteValueW
shell32
DragQueryFileW
ShellExecuteW
SHGetSpecialFolderPathW
DragFinish
comctl32
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetIcon
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
StgCreateDocfile
olepro32
ord252
oleaut32
VariantClear
OleLoadPicturePath
urlmon
URLDownloadToFileW
shlwapi
PathCanonicalizeW
UrlCreateFromPathW
PathIsRelativeW
PathCreateFromUrlW
msimg32
GradientFill
CreateContentInterface
GetInterfaceVersion
Name
.text
Size
264KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=11, id=19, version=8022,
count=38, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=910, id=1, productName=Unmarked objects,
count=5, id=14, version=7299,
count=13, id=10, version=8966,
count=87, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
RadialTree.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e579a43782d6bb1946e6dd039934b8ebcd75bc5b7b251f27bb391909e1e77a9
- MD5 29a04b577137328689e3c866fe150905
- SHA1 bb71534aade9c594eaad785ca88a2229817ae9ef
- SHA512 dddd00f80650887b9425a9a389859d78711d3eeec30ed3f69c9dc4d163a68bc5bb55c995a85b9a7d86af0b53a26e27b2109dd023252db0edbc10d5b79186947e
- SSDEEP 192:9dHWquXaNmrFsA70AH+SPpiOZ/cJQLfFj/pgpCpsK9nQD:zWRGmrG8HR3/cJQ5j/pgpCpsK9QD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\RadialTree\obj\Release\RadialTree.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resources/Cursors/Locked.cur
- SHA256 efce1e639ec64dfb8fe225bc804315fe34c15c7b98489099d49f8921269bed7e
- MD5 f30a23db41160a02e12b41084273db6c
- SHA1 b70d4efb0a08791af4f3111aa94d7801dadf0ab2
- SHA512 5dfb7af824e04af13305a90947c431b5a50a1b48db8f22cccf7c4704c89ad778c5a8d5745c3bce74d771229058b8308aea01fe79bf363c80a86627c346275fee
- SSDEEP 96:OJ6jlnfdJggJhkkkkkkwlm15KG3HnQ/zdhHXixU7YDJxD3nq:m6ZfdJ/z15hHnQ/zTXixSOznq
- MD5 SHA1 SHA512 SSDEEP
Resources/Cursors/NoDrag.cur
- SHA256 a7bc90ec46e2f45a7cfb061213241dd3f76d3ea9551ecece4807f2c965319525
- MD5 1681107c75146d578a95890ed2d443a9
- SHA1 374cf6da26c93f001af1581507b13c101622cdf6
- SHA512 ff43289acfb25cd041e5e54ebec05e0c1c0e561da8633c6cb8bbec9b6954630d096dc3152b603ea4381362ad982b7cef1410c76aa4b9524acfcbefaa22bf6ac8
- SSDEEP 384:oiYUlZNkCWDUNhH8gIQrdQ/z4X8gSOenq:oiY6NkC78Guq
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board Photos/beetle.jpg
- SHA256 0e48361c17c68f1138913b8b6470d1819e415a282c461b8726208b92e46f1328
- MD5 59afcb61e0132b65ebd55c07bae0bcc3
- SHA1 6a56da1095eb7d6776a2d99eae324154fa894b1c
- SHA512 59021bb37d27c325149725b6317f02ce2aaff7143ab9ed36d39b70b79840e5912e3bc19b308a8c8f6d42c12c93ff5606a7f5d19975ce30f9774984e03047ee55
- SSDEEP 768:IU6HQmJs3QiggF0NlBdQjVfmij/U68Z+FIWl+dOJ61SLk/12reqQbjEe2x+WdxYT:IUGQmJmrnSlYRf5j/R8gSD/cKpXEf+WW
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board Photos/doll.jpg
- SHA256 e0f59ec1234f2b4bbee045c8179071d197e777decee7b143eff0a95cd40ae110
- MD5 a239811270895ce90f340b618b2be2d7
- SHA1 67bc6c7dae02cd529b8753cda2cb1d1d388fe67d
- SHA512 d6e7da95fafaba2aac3959d775ab5180617eb183c82c222594ea8feb0fba7578ca7f775f984bdf27eb4b29ceb9575550ee53f213fc8202b6d51cf0eb8c218401
- SSDEEP 192:D21v9RS8VJnJoTS6HaGNEbt8hSdLex/z5q2D/WGgPqxiT/YI+:D4vRVJJcStGNugSBA/z5XzWPqxiz7+
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board Photos/doors.jpg
- SHA256 e8ce47e59e1c7a7b1f606fd5188117c6f4f7f8bddf88f3f3c1618772886c29eb
- MD5 2b5364a8c00b094ddb788c0ab8201637
- SHA1 cbe096f765a22ab6683edaaa78bd11d9f0366092
- SHA512 dc398b4dc1da624775f16146ed34ce9324d0076bfa4a44d9f2efe8ff68fdf905e686000eb8ba297e3cb05ee54079bc46a0057a6bff2d1b41a5ff0514518e4d5d
- SSDEEP 768:X6pteUfUntlrRUO9imZaVBoqC8RTCInP2Gk/IH/BSfH:X6p8UfWUO+oqC8tCIP1H/EfH
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board Photos/typewriter.jpg
- SHA256 3f14bc22923d1a54fee46f88cf290a81d91801cd96834df1d0af65f92433bef8
- MD5 a3df48e6e73342d87f7446606012ab7f
- SHA1 b5f914d7ade14f23c5cb28dfbc07f67830175ea4
- SHA512 fe14f41e4ae68fc749d0c85028b1e398cbbd39efd965a8e0f82a80a7eb5f8eae20bc52bc3c5281bfef54bbf16216ce48c9ce707e13051ebb8a199b139b6d635b
- SSDEEP 192:MxsoOGRGG5/gitAmmlSIa6Cl8JpbiL2tpdchZZT+yvXbBcltAwRtq8k:2jR54i3mENl8JdnShZZTHvrBcEGs
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board Photos/washing line.jpg
- SHA256 b5948d323200509297568f94e1ec678f523c65e46192e9eebde6ac3aa79b735d
- MD5 5f63e653f88b376c10d2e8aa0eb74b9a
- SHA1 ba1d9a2acd9298b426b6ee8f2623b609afca9f9f
- SHA512 531c6235b421e237c4e0dda6a792f984112fb054ab94f9c6cda42b1db16d23287f714a6d50646b9ccea0d05117105576634af146c3f0d41c9899ef786773102b
- SSDEEP 768:PVV7KrZkU6gYbo9ttQkWhGkKwpFFiEFX0hgqCoTB465rKjKCM6Yr7aybqmTQ:PDU8s0rKuFFiO0hgqCoTF5rVZ7pQ
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Evidence Board.tdl
- SHA256 76645650525f494ce58545ee0888cee6ab84365ff52a2010f1c646fdcc5a482d
- MD5 967b46cba14e3d513a5f780ec5171a85
- SHA1 a8f031b0abde4d745465bb95ebaa4c07ff20dbf1
- SHA512 46b4a4baef371a2f7eb2bdb2c4909a6e1025b69d67ba68606963122e44dcc004bcb15872271e06eeeb7be14d18a4fdc6b4007f9fdb9a264db9acc4354afb062f
- SSDEEP 96:3ba45zONrpKyyvg2zCkK1j8GhOs6p1JR81uvONrcxJRyhwrONrcNNJRwzJf5fOoQ:WpCvZCYp7G1uec/wh5cxSzJQeFHJa
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Gantt Chart.tdl
- SHA256 dd59ea498ab5d87ba5205ace73701864ecdc6081e920afc12fec2a32c55f72c2
- MD5 f9bed4b3999a771a50491dc056e12ae8
- SHA1 59a9556b0b59b2d6ccba9c760cd120b952525bee
- SHA512 45f6dfe11e1b8dfd3641bac24bedc29bc3fa859816bdca424afb4f834e0f4cc081d844fa729c3f7920a48b3da84609bc7deb1e9b404ece5b5856e80c845d4f98
- SSDEEP 384:DLQUJTdQbqTO5ga05tf5U+TO5kwhSP5oSP5at5UTfxC5LQK5oI59Z5Zu5+25wO5T:DLQU9dQb+O5ga05tf5UkO5kwhSP5oSPV
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Introduction.tdl
- SHA256 03b7ab327a8d82dab945d2380dc1a093414950434f7a2c5e54c45fd1f9067ccd
- MD5 4545b884f3cacaf79d2522346169382b
- SHA1 3dd3196326dce9a40d61e5eaf490a06427a7ce3c
- SHA512 224c9c1ba959ad61187e6919c5ea7d362969672524efa984905321de658a51714a6b1b50d61579ea74f6b80090487bf5cbbbd839fb9c3dee4684e24e242cf8da
- SSDEEP 1536:u5k1SVixdNAde4Vxdux6xxexU6xciGhTAYD+SxvgU+qOxsQM3gYINZ:u5k1SVixdNAdZVxdux6xxex5xciGhTAb
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/Introduction_Vietnamese.tdl
- SHA256 e1c66ec9a01b47647424b965bfe1f149cc0d52ad466e87a57460ba6068a99873
- MD5 6858c33f8f86fd0bea6ed6d5dbad9133
- SHA1 1041e89a27038c5f878eb99b313d0342bb89289c
- SHA512 e5234f6d8326d996825ec641889541dcc766ba3a895f5779c64dc30749da7dbe523c442f95f661bee190f3836bf86ed2c248e983ee5a65a8094c07c665595eb5
- SSDEEP 1536:WaFZsE4B0c9g+0cAgrgxJrgogpg7QcrtXWx75cTfgHQcq7tXopvz75cZc:WaFSE4B0c9g+0cAgrgxJrgogpg7Qcrt0
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/bank.jpg
- SHA256 06da89cee3c1687ca6b3b0ea86e7d8275d948d73ff67c49488e425e39b575ef0
- MD5 fe860bbada8aa45d9264a12180dea449
- SHA1 b826c86adf193735f3c1e6aabb2a61e551609aa1
- SHA512 9063cd326f7771771fb3f2abfe276fa35c7b162babe6773d5c7a4e16dc2825606e0d42daeab6053e380e63217b2ab84eafaf2bf9bb0f4a5a9be903c9b606ed8a
- SSDEEP 192:B+WsI9x3vScts3VlcvIwQ5floLmfL1D0KADXHucQuqI92PS:B+S3vScucRqflocK5D3lnqI6S
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/edgwareroad.jpg
- SHA256 d3ebb5b18503120d91dbdf3f5976d7dd1fe3c2659bee11ef0042d7e54211e0ae
- MD5 efeeabbb204f947093cee438d748af77
- SHA1 9e0cb55da5d5f7fbecec072e07bb480e0e299cfc
- SHA512 75e191b3897d4b354c45ccd177a2cb099a7caf8e030285f7f1101cc77d769078b2fa14ecf7f4206a6a3db9bf6b3d5b5afeb7adb6471598b3f70355f4f52ff955
- SSDEEP 192:qTHL3D+65l/3S3mNW4NxL52hm21MiOyVtmVwS/iSjDY/KU/Eh:qv15qmdpYhx1yyVto/7Mxs
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/euston.jpg
- SHA256 758e57487b8ee56252b266e789ed73240fbb669e963f8971e5514b1a35707863
- MD5 60aaea5c41687a3f188392c53b151537
- SHA1 665a71fd1b2a0e5a3741587f1a0740dfd0c0bfb3
- SHA512 e57f7c24bd456b1e2ba556941fbbea1327659b067cfb4925cd2109bb25bcdc7e56130b68f338fcb29cde81b384f93b79cf3a1b70450d1331a638afa528b52068
- SSDEEP 192:bW3iRwlsskfmJCZ1r3UM69aeqn16nC+D9gB1mfGNIuNtqafuI:qtu5fCCZ1r3pFAnLJWmfWIuNrfuI
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/farringdon.jpg
- SHA256 8cf417b5cdf9d001512c91cd919d89525264a74305332d5a8ec8812f933872a6
- MD5 89b9347565d5f53232751281811c2bb2
- SHA1 668a7afaec186d44ef0e24ec8ebf207f862fea44
- SHA512 4268db05ef2e0946a29e3e331b0bb949ec156b22d25c047f8d56e93c277301ac8a1b52f215bc5efe1a0f12f843bab41990bb66e01dfc12a524c38fffd60ae4b5
- SSDEEP 192:uaZ3gAppoSrtPXYpJ+6gjS2nkjtVldYXqMWkWAES/5i:73gAp3R/YH+6mS2nkn3YXq3AE9
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/nottinghill.jpg
- SHA256 1d740e725f78b176783e0eb726a1a47c63d107cdbe8db578d8a529f2854674bd
- MD5 83ba8ea2ca48d5c39659050ef6998f12
- SHA1 f359636b39a8e9d287198fb9aaab542e526d9082
- SHA512 26d5310bef437b0e2b77f431f158993b41e85759cae215b5c98c4f5a8f51931c3c394e057e5a0222bb49db5c635711cb7def6a9711582a9818c5cbe6b7817fa9
- SSDEEP 192:a19Fw/GrXGNA3Unq3yu7GMfQl7pJ5EPyPt6FcySEEwseFjXp5YpS2YuAn5oHzLL8:69FwMGxthf3EOMSSDnaAnQTcGw0ZQb8G
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/southken.jpg
- SHA256 1005a1750d41edc44c7c40dc132085f462feb632072e2481a26844ce7ee4caae
- MD5 ae0ae5f9dfc5684902dc0c45210542ee
- SHA1 26d5280bbf768b06bc8346c2bce5137b81e8057f
- SHA512 6cc681d4fa81516fdc140e9528eb0bc6250b45d587fa10318bde448937d42672300a1443ac788f7ef37ff6569e92bda77618e6b1e4c413ab1eed4e47b2c6ee2b
- SSDEEP 192:zX7ZHiNL/FivKxkAxjOjJX57rkDPQb7SyJSz2vA9VNKI14hBvCZSWP7OhzD:zUNNWKxv0pjSyjCVaySWDED
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/temple.jpg
- SHA256 6e8e3a892c61320ea82494999a9ce92cbb620badee89a17577615a96f6ef3ac8
- MD5 7d351eee599a282325c2114a677a2869
- SHA1 3e5ac1a9364fbb43bded0f288b62ab3b8e051c41
- SHA512 1661100f2447b16785b30890be100045eb276f14b1124b41e28a32d9a120e60bccb77c87b9f1ef17efca91584d709bbdd9d8ba2022db4577524f4fe77d82aab8
- SSDEEP 192:v2JMZXx0Yt+1htwsiMTKZAMrtmwtJjJC96t6psVNNi9kLQ64v1L+X:vY0hPWwsjmlmwt1eg6psVXiSQ64NL+X
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/tubemap.png
- SHA256 1fb46a17a8184b4a0ae575cae180d2c37ed9fdcb2b70b98783a6836d56f15696
- MD5 3e39754c28ee006c12b7cd96057f2346
- SHA1 e36a19eb43c4449ad7f40251e83cdff2254e5c5d
- SHA512 84f4e003924b27089a5d554f93ad63f463c85f18f3e109a3bbbc66d0ac348b6a5679398ddd0d4e8eddfd1f0fb3172b8c91063bcaf1b342e91458ad8b46613631
- SSDEEP 3072:bHdPKEsU+5HSpSq1II2fAMy7XLzpfGLOQTsP:b4yWI2eXVGLr0
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground Photos/westmin.jpg
- SHA256 b20ff65319b0be4ddd944a005f2661832273a7f0b2dd1a9972fc5a12953ea89d
- MD5 5d3309eff95ef57f670b2f860b3c17af
- SHA1 11cbae24f2d9b1776eeb9114da89827e072b1c35
- SHA512 e5ecafb614e45317c32c9e71d0d5e5e0cfc8491af8f4e315086747493cbf9e03573138f626e9de2cfe5aa1532e65bedef18d1b869f40fbd06f091dc1ee3445d9
- SSDEEP 192:kAOyZldwc4ckDAXEC/tTmMqcmWIercI4E583UjaIcUPXHlq+UAsPM:kTyuvcXEEt6Mqcp4E5MUjaIPNq+L
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/London Underground.tdl
- SHA256 fdaf28c38a5e15649fe34023d559eacc9ef4cfba707ac02e5d302daedeb0bf6f
- MD5 ccaec19fb3b95549f604a021130debcf
- SHA1 dab4239a6c8820e164dded9ad193c8b74e2e1bd8
- SHA512 139ba5f257dfebba95a363694889c11373b31bda3388e8cdc3d624b0cda0daa2ee77b74aea107808faf20fc58a41a6d70d69c1482426ebfeb5b08f8eb9c8c777
- SSDEEP 192:8HvDzeHEdJRSBHV5oHPlU+H4mGZHjyJ2HLa4HuDkO7:8DzJzRe5WUVmGtyJqaFwO7
- MD5 SHA1 SHA512 SSDEEP
Resources/Examples/MeetingMinutes.rbt
- SHA256 ab92963fa2f95f2ac12c252899f5472f7ddfb89b778714835686e758961c9f53
- MD5 434d0d68a68126ce78992d1597f120b8
- SHA1 fa2354d4090a8aad189e3434459476426a21c66e
- SHA512 8a0824f056953157971aa5f23e6d7dc5264752be3766b0ee4766db5d005c0450a4e892c893e4bbbe656edf223147433477e35b3aef2a6aa3d35a201990b55b20
- MD5 SHA1 SHA512
Resources/Examples/Workload.tdl
- SHA256 ad6bf62f24d6768a151a22aef9fc80798e314117625437fe4cacd5ad5ad458dd
- MD5 a20701c270faa56ba5a2aca09ea9529c
- SHA1 46de6caf7a4832bf1c51cea3a361ef62de99e63b
- SHA512 e32dd9c2da131cb69603e0fcbe29268533f2135276050ad1c9f4df1eca3447dc218135a9d5558d7441717636acddcb706e64282a2c6c4b047c37d8919aba79cb
- SSDEEP 384:n941deIGl+3BN10E1ffLR0NDAFta026pTmal+YBGaUrIglG8UVu1TGiUUv1TrVUF:n941dTF3BN10iffLR0pAFta0TpTmxYBx
- MD5 SHA1 SHA512 SSDEEP
Resources/Icons/sample.ico
- SHA256 4832a73de84983d8891c59a569c0d005ccb6e17d24f23338474065c631082054
- MD5 afc2bbfcb5010f0ed1f7d95f96ecbd6a
- SHA1 1fc57eaa50212a308db4e382b2cc522baabc9097
- SHA512 af1bf7fc769bd8127d200e500806de0b1bf7b4a2730ad36a75155a9c8120a97e6ffe43af8d40c2a39c8420ca22b957e4e4c5269960e52a77b412a10f7064298f
- SSDEEP 192:BhYnrtDINynT+vBJFphYnrtDINynT+v2hYnrtDINynT+v:zuKJFbu7u
- MD5 SHA1 SHA512 SSDEEP
Resources/Misc/Help.ini
- SHA256 75d46a640402ff96914af2e7a1302fff049fd8f8e8fc4e04d387271d16c20990
- MD5 01a63a5da99a08d655d9b54aeb87a04b
- SHA1 1b1e15d255cea0f6a28e2a6c7f55ffcc0e82b2bc
- SHA512 a6f1352a6d0d101030d59e6f6447ba83a20892a1510c99b699a657404079047eda44ab2f50bd0abe25d8ecc93bcc79b986fb96950b62343f88abb7137a9360a4
- SSDEEP 96:ecvJNX8qjKyFKyw6KzQ7W87zXtBhqmaqT1cJAYxNoc6EFhbci9ZG:R80zH+giK
- MD5 SHA1 SHA512 SSDEEP
Resources/Misc/IgnoreCrashDumps.reg
- SHA256 d75b6a6dcb5ca82589c2f09ec5ddfa562a853d00abc9a0b4b189d246a0a99d20
- MD5 9886a6d58eb78e3540f0613ca31c6faa
- SHA1 1ee9de6299cfe152e5524595ba978f96e021ec46
- SHA512 18ca307c8c1dc831757b9753737732e799b6d34e8a83e25446b1aff04243e7f7cc709ddd84a956f217bbd4302d1dc760f4af726d7dc601ae7c0b846ac65dacfa
- MD5 SHA1 SHA512
Resources/Misc/KeepCrashDumps.reg
- SHA256 695a043e0f72f3e25f0248be8585dd17f3ff0e6ba017cb7c42aa3e6c347913ef
- MD5 dd28b1e1aeef5fd5700c20e99a4a7e75
- SHA1 220dfa9975dd6d6971021f5b923a4afdff2e1b55
- SHA512 83ed1c8bb90fd7729c779d16b35fb78ecdbcaf086eaaba363ccf37cccdd812167045b87aff37e6191f5b5db573b261d1688a40dcb2d31bde2cebd86f81e07d4e
- MD5 SHA1 SHA512
Resources/Misc/ManualUpdater.ps1
- SHA256 b895c8cb93af44963b0c115b8e2cbe9cf5f4e03fcd1eb190e977dd07170df07f
- MD5 ce6093ff37df044fca54a200fce3e873
- SHA1 dceae5acd00b644147faed1abb862c5eea47b4c8
- SHA512 f176afd5595a97bb13b7241e45d465ab5caf619ba733d9da71bb50f2c150eecc1826ecda37fa44727331da8331b1b415b38733f2d9e462798823ad65b32a85c1
- MD5 SHA1 SHA512
Resources/Misc/README.txt
- SHA256 0f5515f2651a61e25c90192ab8df19970d18c4784c9ee3489030fb5537d7b55b
- MD5 9b871d6604762e0a19b2d2ea981dc6ed
- SHA1 24a60873a533611ac4a55d394312b400ef595afb
- SHA512 2f48019a85ec2259453b1595c2df9fafc166d97c7c1aec2a818060115acafa524d47fbccfbf2a9d5b7fc7eb5b324b3d60fbd5ae536ce48460a27ce28a2cde479
- MD5 SHA1 SHA512
Resources/Misc/TdlSchema.xml
- SHA256 c8ebc8b8d3f95a7875a42d0f83ee60d32488c63d43ddf07b5cf612acfdc7a52d
- MD5 95ecc733f944bfcf4175993df95cc3d2
- SHA1 c321241f77901a4851e3211bc6f2054a70a9e38e
- SHA512 633e57e6351796f337b4a6aabd13c69546d890c9147e27b30da9febca69be84dc1298e23ede7e5f0b1d3e03a1d26315bb6b3686bc36cf6f704b5606bdc1a0948
- SSDEEP 384:qkIdYG3P2kDIZP0m944IgXGwl4kRvWZmX9dl4mbkmQ2IkdlRwSmRvV2GcaayElcA:qf3P29ZP0C44IRwl46WZmtdl4mb/Qnkt
- MD5 SHA1 SHA512 SSDEEP
Resources/Misc/TdlSchema.xsd
- SHA256 a21faa2a916b9256bf5f4a8d5b4ac1ebc2ce6f1ce4ce3c08354b926a89ab169e
- MD5 eed128b593ef457ac8b8f678ecd3954c
- SHA1 8a4f32dc149a82315f43b1dd949f542e7bcdcf04
- SHA512 73c9002315c2bd257868e3e9902e2e5608efa4f66bd96e9826c13751f1afc6b6c24c04dd8b0f4dad0bc75adaf3dd32bfed7f23dda1996f318bd122b27e4a5fe1
- SSDEEP 96:2HDjNfN4W5VW8/5KNbHdiibimnKmncQRjd86WN82KhYud5OzvaM:k1N4GVzI6Ei6K6vd86Nv2u+zvaM
- MD5 SHA1 SHA512 SSDEEP
Resources/Misc/UltramonCompatibilityFix.reg
- SHA256 53d6af719da28afd80aea93d60328fd7d2b410e726d530de3a6c087fbb54395f
- MD5 26458c07a3bb9943db2730008d7405c0
- SHA1 e9f10a04bdba83fc0308a1de0d2a27cd33d0f640
- SHA512 1d14462248b801d174ee1e3253c4af9da1f5b3b177c6bf7cfd824f733e91646b51a5a9d6be79db04e69c034e9270a8f1b2a416e92067714256fc90acc1d08c2a
- MD5 SHA1 SHA512
Resources/Scripts/File Link Verifier/Online Help.url
- SHA256 6e67d3947cf814fc312936f0a2cfcd4c32df188affbf0e17e225542cf98b66e0
- MD5 c4509f8a5c8624953975755c4661c32d
- SHA1 f87e2ae2d24feb1c8f502ec5d7bc2439caf38120
- SHA512 141e5959dd09a0982d9d0317d466c8bab323b88c7daaa4e3bf6b03b46a9153b2d756d1e3f0ef9d91161d1a6bce59395477a678ca5022b266bcff1222368c69a1
- MD5 SHA1 SHA512
Resources/Scripts/File Link Verifier/ToDoList_2004.ico
- SHA256 bde5ca7331ee78b0b283876e7427910701bcb50b69db46cb2f42aeb02d09661d
- MD5 5c95aefed6ce5f5b329becb90f4bf0a1
- SHA1 bf59b8580d543895ae6cd1ea648638fa6ee75466
- SHA512 35a8ddcb2726f366a7358b84c24b3ec862e6670d02b015fc0d1c92ac518b485fbd2c0c4a1a57025b62dc75d908330c16c72d1fbb25cd408cd6dc5b08a7962e35
- SSDEEP 192:V1/rDDTPu4jIfkRpzKxO3z/Jb0bSglCsVEncG2/i9RpHQJr7NBvik59+yccTez0F:H/rzPOGr3z/50251QJrJBvikvTn
- MD5 SHA1 SHA512 SSDEEP
Resources/Scripts/File Link Verifier/examples/filiverto_test_cases.tdl
- SHA256 7cbc919b69c796ac629dd25a3980fa29f478b3e1669885c2b0f59ddb60c4178c
- MD5 9aa3008c90f661fcb2ab4d57ae955b45
- SHA1 e4cd95662e7be9065b7675ee205ea9df5e8694ea
- SHA512 7faff774af46d6f24a7481e606d7c7cdd97d28929e26e6f733d316c86e35d117e1e7dcfcc18e6be886845a45b404179b9b68b167c35dd4b1b64d846c8f61d838
- SSDEEP 384:VHxlhlwDH0HqlKFDdRlwliHuH2HeHBHvHpHTlpR1g3l2luYyHvHxHml2MbE:9QrOPYgoxv5gvBZ
- MD5 SHA1 SHA512 SSDEEP
Resources/Scripts/File Link Verifier/filiverto.pyw
- SHA256 d39c0dc62a4d0a81c014cde94fd5d8e50fed0f4c7b63814dec93e95f7b497056
- MD5 1035533573b9552a660b4f59393551ee
- SHA1 f559717eaad61c248913d7a33467baffc3cea3f5
- SHA512 43409a3b97cc54235685ceb8318a4ba94209a9d1e1daa0dfa5d4c62d279ad26e9b2b225dd65750ebb3ec559061bd4f344ac23787ef63d4f24e264ab28fb07848
- SSDEEP 192:lWIX9JMNwhCtFIJTRJ8BOl36seDxiRThE:lveoCt2D8BBA5W
- MD5 SHA1 SHA512 SSDEEP
Resources/Stylesheets/Z_DetailedReport.xsl
- SHA256 d2c606611a4126699c456b4523b0ebc7076930ea2452ff9d546f5d75747af191
- MD5 94d9b951d79b858fe5de84277434a318
- SHA1 b2cb5efc730ddc04ac2467b1dbfee98337783b5f
- SHA512 1c105177f52d712dd9ed315caa25e0ac5b8357f1703ac65e8c29d78d7b7fe4ba19267a4e2153a62810be8df50ef239f3f8f11f2184ba5847c1217e46653c720e
- SSDEEP 768:SKASD8mZf/b8jArKwkW5FnByHv5Fx5snTLQlfolcn5FnRhn2x7xPXQD5pNzEOVCh:S6ZfjaUKlW5FnByP5Fx5snTslfolcn52
- MD5 SHA1 SHA512 SSDEEP
Resources/Stylesheets/Z_SimpleReport.xsl
- SHA256 539a5880a6c246fcf23316ea6c1014093c2d982881ca06e945c0eb2eafcc887f
- MD5 83022c050b7e5939da7c488bfb961c95
- SHA1 6f69ccf5022a4c5ffd210491ccb254b7addc74f2
- SHA512 ab0ed4d5ef8dab996e2fb700c566bb04cd1fa8162196c7102050842dedde02bc2d22b296d4ee18640d656a684464955346b3664ca90aec1d92d78d17fdd11379
- SSDEEP 384:uCKTkBSszmge6Wi17Rejjwk7pLV0uGpqa/UPAFEaRg/BIkIBe6h80Q8k2TpbVSdt:9KTkBSUmV6Wi170fwk7Z+uqqa/swEaRi
- MD5 SHA1 SHA512 SSDEEP
Resources/Stylesheets/Z_TimeSpentReport.xsl
- SHA256 6493f9135f9dc911e10db68923f4eeb3b7736e0c9d100222c5723cb296daf56e
- MD5 8e66b67f174dafdae567c84184c35491
- SHA1 f2bc5997f6585995551a258988eff058bff86c8a
- SHA512 44cb1ce889c528afaeb065886c26aed292e14a99306a4dcbdf14f3f127f2ecc59eeb4be2db5b93fc3eced0c1e1ee7421cc67bf5493197725acc76e4b78aec6c0
- SSDEEP 384:r+TgfBOjKSPtj+e9fiRw0T2H1Dqnzf70uBfaLa5pQVvBm0JgXiMurCxyCGJfIOM9:r9ImSCRw0TsIfDpia5pgvBm0eXiMurCN
- MD5 SHA1 SHA512 SSDEEP
Resources/Stylesheets/tgEstimatesAndActuals_eng.xsl
- SHA256 68a4f19af438ecb4c0ca012a631e98f9bd5077f1d3abc7a1b18249904cd82f4f
- MD5 6889d95a9fac299a9b75129c5fff5497
- SHA1 b9ccd08a7dd3997b36d6c868cb3c4cf419c5f614
- SHA512 f0a7be4f58b2553bfaa9ba80cd402a2334f2a6cbf825efc6950f6eb7a2f1c5fa89fa7e9b99b0041f98813951f0a0a35060465d4bb1a6971f8f612fdede053e5c
- SSDEEP 384:zAG6MApAnwjyzGpwn5WcTO71tHWeyIuN4U0r1g:8s4AvzGOTTphpyU0K
- MD5 SHA1 SHA512 SSDEEP
Resources/Stylesheets/tgEstimates_eng.xsl
- SHA256 f5e7c28fa8379cd2e0aefb9b3495cb9793011bcb52b4185dda79334ce0c97c49
- MD5 6f829332374fe9a7a565fc97dfbf3b70
- SHA1 65e2fa98df138a197e81fa396f6f240737526304
- SHA512 381a51b9c6a1010117d3af1fba4579711cad6c6e9f6cec6bf35a7317f14e8b3cf0798c32a01cfcfdf9114996402aa76b081f8cb47ccda6f9c26b860ba1c128a2
- SSDEEP 192:dvAk/CpM5I43DTvgWfgg6lbUsyzSpwcGIGvuSycTWBkKyN4U0rvK6S0U:FAG6M5z3VOwsyzSpwn5kcTRKyN4U0rxU
- MD5 SHA1 SHA512 SSDEEP
Resources/Themes/ThemeBeige.xml
- SHA256 3875e939bd60c4d34270904f48715924b444d1140fe0e1152350b25f92b1b097
- MD5 344a9c660320d810eb8f3fc09f671211
- SHA1 2caacd8304215d39b5afc3e8bfcfa4a00970d0a9
- SHA512 b75aa2a4a5264ebbf270a5531b62ca366e49197e8aa9ccefd58198e52f2d694d941e433ffc92d0a81335ae6dc8704aba2896e171386fd94acb613af9ada146f5
- MD5 SHA1 SHA512
Resources/Themes/ThemeBlue.Original.xml
- SHA256 d5b2b9fa3e4975b08fcbf1d5b71a98f245512ae9b3063631ca98cb7552e93e9f
- MD5 e933962c1f2fae05a4d6e2ca6258f14c
- SHA1 48954d09050a064d777b18f5aea85c60a226f70f
- SHA512 f376239eddd85c41c24b97f8a32ac70aa8ac34dcd0024404dbf3d177cd0fa9e3f9dea6b05af59be151830569b2ea2fd2c14e768930fa5e7b4dcac52a366b9950
- MD5 SHA1 SHA512
Resources/Themes/ThemeBlue.xml
- SHA256 7ca34d93cacc3d27112af7ed53c3a25a838cacb5613ecfa0a83d78ba7e97ec66
- MD5 f37ba3b29157339a561b5c3f338d3d16
- SHA1 c69e4e21a65245a91188f6b9e08ed12a7ce2327c
- SHA512 7ff21e54027ef416c6e3f633d4b34202a89f4a10f99177d9cedbe9829d08b201983f66cbf5b47b73fb372babb5f3d6aeda5a38df4cd40b0d23c89feb83e34e2b
- MD5 SHA1 SHA512
Resources/Themes/ThemeBlueXP.xml
- SHA256 16ae269073303ab20145cd2cbc634e503b1a2f4ec380d9f7d62a875a21253d1c
- MD5 80bf9c2de8b22e08f23a154762ce5f11
- SHA1 cf15890354385bb7b25eefaff499e5fe82c26fce
- SHA512 e90b1a33b0095a2225b9a09259d84b98250db0608c6d93f7ae83a00639480a339244f88ccf7b811dec1aad344b593f41444f06e6df79d289db7e434730f436e6
- MD5 SHA1 SHA512
Resources/Themes/ThemeGray.xml
- SHA256 bbd02d0d78e8386c6743641da2f40dfd659d099698b6913f492f2c3ebaf32e3a
- MD5 2574cbf00a6e54587c8261619a8fa907
- SHA1 66ab3e6d7eaaf266c16051c929eb8089ce876cff
- SHA512 4d45dd3d661b63f52d38cc3afa2a245100c411fdfad6e0289d650e922081ed1caa59a62d6f7c07041e50e51f53f532f636fadf0f65b268a4bf3a76b420adbb0e
- MD5 SHA1 SHA512
Resources/Themes/ThemeGreen.xml
- SHA256 b7198c0bddf88d8587690dc301397223716b942efff8b71ffd6afca902488155
- MD5 7dff8fb7c0bf8345cf49eee683c98aec
- SHA1 d79ecc3055bbae50804d271e32d27b075e19ff39
- SHA512 66961d22a4701340d8194b527d1aa0efa20d589fe9d44811e581dc55e45e635b1cf0f8aad58953c997b2693d41de4cf15a5ad3c8dce4c1080373db6cf7451ec0
- MD5 SHA1 SHA512
Resources/Themes/ThemeGreenXP.xml
- SHA256 377708de9f927fb1688ad3a823a845e7673fdbdf7d8919c0b466fef3011dce01
- MD5 faf18904c9d196c50c1c48d3867b8715
- SHA1 f81c127c598f08ff496ee4c220307a4c21ccbd7f
- SHA512 f02231ad36854d8f8be69c5f9856e1602e1b15ed58ffe326abfa07a704d03aa2a5916d7e6c8faf6b543679b37ccc53eabf7cced599c47115c4e444f8eb1423b2
- MD5 SHA1 SHA512
Resources/Themes/ThemePurple.xml
- SHA256 2e9282b033a1b579e9c05d87ab8da2e945fc2b5a348ee516a735448223a23923
- MD5 ca6c07736a4344e99bd978b2b8ab51bd
- SHA1 916a7dcd318116767cc6491e14bdf5604ea13be7
- SHA512 04634c323404ec07578699a04a65abcd395169ab68e5b088b14e50f0723345fb7ab5357fea83838231f746c528729105eeb821f7496f5f569cbcc9bf90e348e4
- MD5 SHA1 SHA512
Resources/Themes/ThemeSteel.xml
- SHA256 a1880ccc2ee86cfb4675d024da9d026b662ae03437032b7c16024507f9a5190b
- MD5 972d80e20fbb8f92a9841ac6acad2c34
- SHA1 ef214b2b2431c06a3406fbeff56fa5a4fbe1aadc
- SHA512 480c0d4873f40d924aa15fef6ec06e21b68fa4ee84ff71da345101bec6eb5a343a36a4b3cc4c1ae69ce795e6400bf37cc5de3a5542993b3bc47aea5962167fd6
- MD5 SHA1 SHA512
Resources/Themes/ThemeVS2010.Original.xml
- SHA256 8d054df8936c73098dc0771cb82192009d9843f4ec21d2ad1f954bd9955812c7
- MD5 6cc83e8799e0e853bffc1a86f06360ec
- SHA1 efb104ee6aa703eaea78422ec86a5ce3198bee4b
- SHA512 2928a77bbee2f5d1f5c13ca5b386950993ba127d3f80e70e4c7861bbfb7fae2e231c889b1ac1c6ef08fa622677fba4ce500531559780edfce161358b98169133
- MD5 SHA1 SHA512
Resources/Themes/ThemeVS2010.xml
- SHA256 e84d6c83eb620394bb3d37377963e05b81c6e361e2e248cc1842c36120556b58
- MD5 c717e5a7dcb3f616be873aff666e2876
- SHA1 efb95a06e3dbe9d9eefcd7d7d2040e32230fa666
- SHA512 4788ce36f86b1a9a8170d7530f3b85d41584d117488546ca33103eee388404941954e33b5b69af5fcc1557d2afbaa5d8e1f266eb390fb96eb66584182b2c0f4f
- MD5 SHA1 SHA512
Resources/Themes/ThemeWhite.Original.xml
- SHA256 4a65f10deab6e227df20e10826ea41f33a5fbd3211b6d56187c503a8d244ec96
- MD5 708a4a7aa9a1f0b32424cf2c0297bf95
- SHA1 7b519096667a4be0af3c3813edba16487ac9bc34
- SHA512 72d43563a96e39e655fc8c1bc31fa26128137e4ed85106e6065411702a775b6b536edcb97ac11d0a4a553fa09383e4268f418f0080b5040c27e4f92a4a961c9f
- MD5 SHA1 SHA512
Resources/Themes/ThemeWhite.xml
- SHA256 d1e9d74716d44e16314f702757281f62f39779f656347abe5b36eec390d1931b
- MD5 bf0a36b15d199de1f4ae70b02a03b5de
- SHA1 db733dfa7e54da6469b038ed44ff24c11f907874
- SHA512 3ae7f7c7b9272f1094aae659e2b6187fd20b1ab03bf02ea6bd7d69a5fbc2e14e46462c93980f43065de09da68f8a35f50fe0dee954fa2616907f6c28508e03e6
- MD5 SHA1 SHA512
Resources/Themes/ThemeWin7Basic.xml
- SHA256 9f72c15b3e975aadb45e126b0c9747977a88ff42019009c40b89325d2878236b
- MD5 c352238a25ad99c468bd120844fd4d56
- SHA1 8813f03a28966e61eaaca95f6b00bd01ba0cb67f
- SHA512 1ce03d96a68def52f302c8e1a9fe470e47518c368bd55bee932711ba3fc57e36907237067d357f58466aa46305f81eec328f708c8a6310a7ebe39c8d42b6b8f9
- MD5 SHA1 SHA512
Resources/Translations/Danish (Denmark).WordCloud.Ignore.txt
- SHA256 42ee3f2aff2e96fa3f4db9b7295014a6ecfb6cf56599145e96ec185e2440ba3d
- MD5 61baf32bc902aa581a587f3d792cd907
- SHA1 bca374fb6b8ca3bb657faaea9242b474e1b09c7b
- SHA512 13f0b56e960e76741a2bed52fcee8e6adf57a01edb82a0262fdb16086d31d66a4ae76d757c7998cb889b958ce1960def7d9501f7d794dd26630daab4c8bdd870
- MD5 SHA1 SHA512
Resources/Translations/Danish (Denmark).csv
- SHA256 6f20b5b4284c81c4d0dea57e320338199507d1d03fb04c3b4c77e9e4b2de96c9
- MD5 ce666b57213d7f60ab6ac7e85f2a614b
- SHA1 4a6d4229b418fe85c5e65597ee5d5132ab29cccf
- SHA512 d049cd738b0b2d6729918eca5f2c8d48d0107f59722746ef4dd2a000a83133a5743280048f57566cd82eda130efe54a01a35a9f4907bb94c57442688b46c3671
- SSDEEP 3072:vM5uvmKVyTB3+1s8R9kxBdfnJ71e0ULXv3pz/SGSNcx:iu0q05fnx1e0ULXv3pbSra
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Danish (Denmark).png
- SHA256 c116fa492d4be9f07fd9c5e41e4ce7a17ce2169ee35ac2389a5651ebc01fe261
- MD5 d7f6703a48f0d0d19b582afc2ce2cd22
- SHA1 48c8fefe82c63ac1392eff4781ece6917090fe5c
- SHA512 59cbc048e7ccad56757d0ece3e37069dbfb82fd42e3c45860418f666e1391e8afa54147e620345ca09215b54a172e36c70c7fad377f7ad3bd0560d4481402c5a
- MD5 SHA1 SHA512
Resources/Translations/English (UK).WordCloud.Ignore.txt
- SHA256 12f72d9fee6dbad9895004c9e7120c928c4c3d52571fc88a70295a33f8b7086e
- MD5 c9db1d08a11325da4127d5d70a602693
- SHA1 7beb878fff94469c2006ab6e38b2f42e3e81dc63
- SHA512 08e9fd19d3d64cd5460adcd42ef781736a522f09b375050d923b5db67ded376f807c824d5ee449a41103a1e590c17199b880f9b6e5e948d88f413b5e2cd6bc71
- MD5 SHA1 SHA512
Resources/Translations/English (US).WordCloud.Ignore.txt
- SHA256 12f72d9fee6dbad9895004c9e7120c928c4c3d52571fc88a70295a33f8b7086e
- MD5 c9db1d08a11325da4127d5d70a602693
- SHA1 7beb878fff94469c2006ab6e38b2f42e3e81dc63
- SHA512 08e9fd19d3d64cd5460adcd42ef781736a522f09b375050d923b5db67ded376f807c824d5ee449a41103a1e590c17199b880f9b6e5e948d88f413b5e2cd6bc71
- MD5 SHA1 SHA512
Resources/Translations/English (US).csv
- SHA256 5a9de26b62282bb70672c3d5a061a71a7c23c36a2ccf8d478c70d944f72c04d7
- MD5 9949a3d935ba98435374b1c890c51138
- SHA1 84515cc78b5bd25aa8c3fae49a4e2ce12a96e6c8
- SHA512 21a78aa714c0324739875fe76f820383d78ca847d4bf48b6d3a92b57dc9204acc544ba8707965d376bcf89bd87467ac72b10feb2c0cb7d0581dc31dbce8ca333
- SSDEEP 1536:RJSn36qP5KIB72H9MxnJ1wkYuuCCSX/643f:+36qkNeoTQ/F3f
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/English (US).png
- SHA256 e69a83dab4d7fb9229d02d97867ccfb7ee399b423066bc111483223bd9551cbd
- MD5 1fed48df484720389a06621994f9f452
- SHA1 da7ccf7d3bd6c17ce96fc1e0f9133b483075ee39
- SHA512 21aec3421ef6742e0b7c716baf7b033b5c6deab01eafb344e95ff5f95d5f348d732bb5f2cdf96dcef7e485101e89d0353806f77666b2a84a5b0a98c6142f837c
- MD5 SHA1 SHA512
Resources/Translations/Francais (France).WordCloud.Ignore.txt
- SHA256 118836cf4b97eb23612f0674f3311a1c5123ffdc91d6eded29d362843233bdf8
- MD5 c33e2138b63d024078f3d81c5e3b6f2e
- SHA1 87a32eb79aa23df028c64a1f6216257706094a27
- SHA512 f6dcd248540394990dd9a9c320d35061a28679508e295157f5966b7072a1fae21e73b9fa37e762bbbc8693d0117d082ed327b5835d7c84e4961f2bbea721b4ba
- MD5 SHA1 SHA512
Resources/Translations/Francais (France).csv
- SHA256 56cff3423b05a42a2051787baaba25af4e559ca4f71c976d0b6e5e58883a6a68
- MD5 8aeb7a0ae8a68be686ece4ebd10cdc0b
- SHA1 cef960b4f5d67729ee5b213a0ec022c11461426c
- SHA512 91d11a54aa5e4c2a41b358b0f4fa33c87152834ef44110200d68a45f98969daf24dd0f1ddf2ecc3ee0bfe6d374749c09555750da744d355a90902c0b052ce6f9
- SSDEEP 3072:Ly0J1nH7XpYoIwhid8teV5wn0SmiATvYFV5ftYPRNUAA8jw:OU1ewC8tz0JEFinUAA80
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Francais (France).png
- SHA256 2e01330e00e1dcc08d9f0dca4c1f3b127c89db3c84ee171de250bffc67819cb7
- MD5 d9d01726e961f9668af9d44ad6838a6f
- SHA1 1f9ca18cba3a7dcc68aa0b87199a690f4cf7e59f
- SHA512 5402cdcfdc218e1812b37b48320afae55cfbce2d3058f70e8f12a116ce3f8c07ee2d4e704c2344ac3d4bb52a3888fab835484b68de14a1ce04c26254b08c0be2
- MD5 SHA1 SHA512
Resources/Translations/German (Germany).WordCloud.Ignore.txt
- SHA256 1055fcfe00d6478b81f1c50a89c004ec53c9504a1772c461c27414928326a1d5
- MD5 25ed6a1d593af4e28223d1c732c39a24
- SHA1 195128cb93f1da7413f6d75d70ec3638f145562e
- SHA512 fbf6162198cb763438b675db92bd803088b2d2ea31edd383a9372ef3fc6e6446377df23ec150c44c8d7559d767f3d1ee42fcf88a8e2771f61828fb89830d43fc
- MD5 SHA1 SHA512
Resources/Translations/German (Germany).csv
- SHA256 1809921002bae842a50aef6a91b12c94cd8884a5be8a1951ba39c0954c2ffdd3
- MD5 de7973f0ccf52040fb444547e3036276
- SHA1 5db85d70b7e2793d5af8a893d1b8c4cfef6fc38e
- SHA512 a719c00659bfe00402e3b586b2ad68d51effc011f26b12a91eefe6e32593974609c8ee0b229f35b5d8851352a3a5b4c6adf12880570cf0b38c1d5db894066243
- SSDEEP 1536:XnPqcB21OBnAwj9GnG/ILci7ZAOJuCt8GrymVpwzWcrXyzBypKNwok1pWm3mp4Oy:ucOL35JlPZ5BGokxhBxmqUYZE0vnU2Pp
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/German (Germany).png
- SHA256 d7281e30d49e1ce17ac6dbadd81ce68311f14d7f66eebc165e2601b103e18e0f
- MD5 fd44577854a0ab80448846dd9ee9ac89
- SHA1 7558f6f980b9631eb9d68bc64a60569c4649167b
- SHA512 12c359fca7059ab5aa2f81f12419eafe592a6faf06f829b309db0c0ec3234738083f5e3ba0acb397e449846b49324bb593ee2f9321180290f3a7bfec6963550a
- MD5 SHA1 SHA512
Resources/Translations/Greek (Greece).csv
- SHA256 b2e7215cd22d65ff6b7cd82b07560a4688e5e9bdf47505968d371b742ffaecdc
- MD5 e50802f6b018098e65fac0b9b60a3902
- SHA1 a382c66cab4ab924876686c04189f74360580fe3
- SHA512 0b80edf2ce3987b82c1ddb1f106ffcc734d109bdff6bbedef88fe5389bb6f7796872ce3a5626ab09afe94cd641096cf91b693342886fbd649845c522f41faffe
- SSDEEP 6144:xFeHygEJoKvttW6uK3e4D+A8WO9yyBIghS2PWG:xFeHygEJoKvttW6uK3e4D+A8WO9yyBIk
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Greek (Greece).png
- SHA256 67b43d38e3d28e097d8f54a4d6bb47933e8f04a529cad49197d4051dde38c59e
- MD5 0282bd87c6882e7237676ffd8425dd18
- SHA1 0578a1cbc7eaedf361bb2d26406d7e35e81caf65
- SHA512 2a861b420c02fe1d5b455fc546fd172f883ea317c6916592c574be0b957ebe67b12c130812c0a2dd00774321c50ff52f860510ecce2c3445a77551790dbc847e
- MD5 SHA1 SHA512
Resources/Translations/Hangul (Korea).csv
- SHA256 4da552ea8e784881f7a00ffef6df4b26eba76f4b84bd08ddd8ac7ff29ddee32c
- MD5 e7824045d458c213bef07a5a6661cd7d
- SHA1 96c0e43899e1294aac4221e99c149cd2dadfceb4
- SHA512 8a6423756a672f0d1b86754dcc9b4571b3f909d1f6d195d7c520aab2e789c64bc30e416f1d06a3fb04b07fb43bd11b90b098003aa9a4193ce1489db4e69684ec
- SSDEEP 3072:YA1t+X8IARnVRTj2WJIIPYnWm9/6to5MFPzJNxdfbq+r6xbv6q1WwBc8SoCp:p1thIfIDxdfb6TUwBc8Wp
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Hangul (Korea).png
- SHA256 f3c2f5a4455b3e5ae13837c0907221c4a4197574d53e0a8d7076bdf52309dbba
- MD5 a8951f9057753829ab9d401dd792c569
- SHA1 8afdba9d1dac22c79913f0c357af94354044aa5d
- SHA512 ab9dbcfd67c74971be5273f38af30a9e3cdf8d4e3428476dc3cdbaf77c5965e8da3c60038e1d8eb43538bbd6fedba0fa141d2b4b126d36600e34936ac425c111
- MD5 SHA1 SHA512
Resources/Translations/Hebrew (Israel).WordCloud.Ignore.txt
- SHA256 919f297a4c0fd73e5284ec8c9e0a35e9d22cf143d3b6fb603c8dd4ba5f063e43
- MD5 2483819e51ed17109640c4dca977717b
- SHA1 7b59dd1f42e9fbce4072146ebf6bb2202c9a5c56
- SHA512 042e9e54b1b141716642671a1e7c27a38ca823bb9ebcf43338f878926a2d0d56430daa7f736e8bf245c1ca8328e2e90bec659172aad4bf985d695ae108c2051c
- SSDEEP 96:OxiJo9Cov6tIocCSpZvtbtcVD1TAOnzNDKWqTBkIUvGGIJlD86UlE9L:o4oEIeEvHADhn9bqTiIRLE6UlE9L
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Hebrew (Israel).csv
- SHA256 448f0a69181eb8c860980f4b8528ebf76af334a533005b4704f3b525fe0168e7
- MD5 f6a175aa2d5c3cae2874a11bf1c7609c
- SHA1 2f3d80671e06557305a3d71b1fc10371b1e3792b
- SHA512 614dbd0d75d552b65073f795ec5d08c0cf7548b13e25bbae73096c83b8c8d79af6526f7073e3cc02e8f976d91f1087298adb032ec8eb143e326b24723dfb0fc7
- SSDEEP 1536:QLb8ZsBIseFrpoAzUD9KDaeLVT6Ks5khvOUpNoiuLzVu5f2tLyZktdFlJt3:QEOPeFr2AQD9KDaGh6rFUsu5faLqUjlT
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Hebrew (Israel).png
- SHA256 dcbc1c161e94a85a15ec3d7740a6a2f52154a3be3edd69a9b68ff0c88030b9b9
- MD5 551a7729eb0e7faf85ab0b1f7583db21
- SHA1 3c000b9d2c40dc0254a16a63e26f90f6f9bbaa7b
- SHA512 4abdfb29cb4d07e08b00dc95523c34f14e8aed227058a0ad9d2b5d58df9ce15a382c283a9561fffa39e8610496c686a13f0ddfd0694a47ded8bf17e2ebc3471d
- MD5 SHA1 SHA512
Resources/Translations/Italiano (Italia).WordCloud.Ignore.txt
- SHA256 6fb3c985ddd068c7161cd63d23a7e63006db96981935d5848d338d8b675ca219
- MD5 8684a204dc03a9060c3260899ed20296
- SHA1 c78b5130bdeefd72241b3992fb161d1d7114d7aa
- SHA512 03cc7c9db6f8d7acf391205d88534adae4573a03a391e7e9c0e1486aad4125363bf7ea4d1f78561d0c8648a2cdf941f936e56a6b218b16bbd6056d8128b3102c
- MD5 SHA1 SHA512
Resources/Translations/Italiano (Italia).csv
- SHA256 4954b2768f80f6473e12366197360bc2e9b629a81b5a38bb000e889f77755892
- MD5 c937964691d7ea8ea143fb24a9c6eafd
- SHA1 691cf0ece954ad29126649054e2e0f6f070de462
- SHA512 f4bbbf85cd3bcfecad31a3686b36b2d70199f0a2b3edb50d6fd67a7b4387dc5c46fe7b95773dfe303793d4e9d1a730f93735373aa4818e26e268ddc87aebbb08
- SSDEEP 3072:HLh7oN0vIpRbtApbe6JnFX5AN+DCnYmvOc:l7oHpRbtApbxJFX5AN+DCIc
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Italiano (Italia).png
- SHA256 1338a802ba51bd6858a3056b455abe86b4ad390db9c19aea70ecdd95735c3aff
- MD5 f9622d359c3146dd588298e275e173c9
- SHA1 7a6cf92dde23e3de89c72707fe17f438fe8f3460
- SHA512 e50dbed68d39cbc80a0bbe5cc1a1ca37138c1411bf0f9a662be2a830abd4e785e2b8ce2c3b4d1a3c02757ed7b162f91f9d5140622c2499b4139657bde94bf502
- MD5 SHA1 SHA512
Resources/Translations/Japanese (Japan).WordCloud.Ignore.txt
- SHA256 9a3cf3f3840c686dc9ec1c3dfa128f69d07ab92eb66a901fde47da3c53cad716
- MD5 ea802e71840104e9e055ab85ae0ededd
- SHA1 98c86ad8aed17769c8fb5937d879dc7ccdf2fe0d
- SHA512 50f4ddf92a64fba4c3ed63f139d73e140a541bb7a6b3d45eddef7ecd0026c19da9bd7f3de751c0656a62c8530c4c91d8d62a7620e9f45f42c2892126992ddb0f
- MD5 SHA1 SHA512
Resources/Translations/Japanese (Japan).csv
- SHA256 a9641befee847e5c1294232d54aa54a8f3356a623e036f3f442e9a568496bb05
- MD5 9ef0f447313b716a20129b627e125345
- SHA1 4bc1b67d68d4a9637c60e17a7de4c5b75b73784d
- SHA512 8109884ee52cea820153e8619c718c38545f979ccb0dbd0d7d90fae932d3e9f5c6802961706fd0a3065f0d796d872a6c0bf00943d4d2d83987438a2590d873de
- SSDEEP 1536:KJSL+1HHULSQCy9x2HUiJjnAiKYSO6YCpk+KGCi1pvWmb9:3oGSKx2HUiJjAiUxhNvt9
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Japanese (Japan).png
- SHA256 1855d4f1a4d4ae8b9224dc78375be64664e365f57c0188ea46acc1a9883b5100
- MD5 b26a65b70847d84e0112477435a94f5f
- SHA1 5d9319d6a75294da7c78dae8cb8453a5b81d6bed
- SHA512 5501e5941fcf17f9c213dde5368be59222e4d3a6176cdebb7ee223bd48a909958788e08a1ec71cd4c9be53705cb1a8503b33d78f9cd2a5722e5e071b3e421338
- MD5 SHA1 SHA512
Resources/Translations/Nederlands (Belgium).WordCloud.Ignore.txt
- SHA256 92da92a6b50e3103a8c4f088dace26594c643a426e96e77dcbe69b816cd6a95c
- MD5 14e3594f6ccd3e821202fce51f4138dd
- SHA1 84ae2150d1a91c0ad3c971e2c2082ae62c7f874b
- SHA512 8270ec71215a1e1944778d20d8e3ea5f5919724776011e76f5adbdea6fd143f4f1c154171785d6521275b1b0e41d642eab660fda930275da1f0fd3ada9edb99e
- MD5 SHA1 SHA512
Resources/Translations/Nederlands (Belgium).csv
- SHA256 958ebfbb7b110efdbbb975b37ab9d7e5d5f7ebcca5343d53aaa7656dd5ab3324
- MD5 6cf612a153bc9aa3da956a23246eb4d5
- SHA1 c0fc9a3bd65c8ad07ed99455edc4732e7fd86ae8
- SHA512 44d6804b36e7358cc1c725f345d6b35a971a1979e4a7f2771272f5201c019545ea625a042f3039b39a6faf014a92524ee8d1a3bcf557b64ded19a0fe93a51c2e
- SSDEEP 3072:kza274xWp/tJRZPJMoEb7gLs1WUv2El1uSMa9zHc4Z:044jJMFgLiaG1t7f
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Nederlands (Belgium).png
- SHA256 02c1c18f25f681c81a47deff51904e47ce7dc6b36b5fac4e5e378c0b1169011c
- MD5 5797fc60da5e650a3ab10e466f475e47
- SHA1 003f76972c9053034f0d241b4a360def46e7a069
- SHA512 41b090e84859a440a6385a348b340f111a32393891be673a306cb42e748642c6afb7a9c45ab4853111bae67a9552fc3295d335f3c1d3ccb9f7ca2cc54aad0b86
- MD5 SHA1 SHA512
Resources/Translations/Polish (Poland).WordCloud.Ignore.txt
- SHA256 d0dfaf34609a7b3fc49dd2bee862ab4cfc5e56be01f82e8fb58926ddd2ff048b
- MD5 ce6b47494544962803a0b01a6cef5862
- SHA1 7f8dc59fac7b7355cf05fe261715de151ff0af5c
- SHA512 eb013db12fb389ab171e66f4dcad2e3c4cddac14349fe726524e809d6c0d80c91189f64efc248460e59e3b06f8b2e7d9383e95c533cd0da90718ee68e2085c6a
- MD5 SHA1 SHA512
Resources/Translations/Polish (Poland).csv
- SHA256 9a317ae770936b6f870761732a1b71cc1874abaa39760ae1decd9901971f1699
- MD5 4125bc769bb27eb8551407044184c449
- SHA1 02d6dd59e45af8c6234a2cb1329a21b0ed2e28b5
- SHA512 75e7ebd26986f47168e6e67054fc4c75ea0ea17231d5244f1e46973f4a55e952c62ac72fc07c4c2630ba6a068f62b4cf704af72c855c9c1e931e10aa39be0cd7
- SSDEEP 1536:E0qDsb+sy4MRBJKIOb2mvSI6iQkAplduVq+9VBh19DPWvcyiNTAqVnA/lvv:E2+sy4EwRojkApHuswDPOFYTAR
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Polish (Poland).png
- SHA256 03b3207f2fd8248d2ecab4346f8f77a0e2d8f4e28c81be4047b33faac82da8df
- MD5 64b2db97f21d056705014b26c8ffb646
- SHA1 a3de400c41e07c364df9e5035872af1246b6ce85
- SHA512 3666b1f6e49206652b64f3646271ac9488cdb77b792b5814e7344d6b98aa7ebccd505a8ab529a7e47279b0e0c54411b8e67874ed8d00634e82070108cbfc2e26
- MD5 SHA1 SHA512
Resources/Translations/Russian (Russia).WordCloud.Ignore.txt
- SHA256 e9dcdc8132c4961c3863c4c052dd2715f33bfaa78784cb1768cd1ac94cf5354e
- MD5 da20f13b67830a71a83f116c802397b2
- SHA1 9ad2a2d75fbc665319d7942bf4ff2ab63f74b892
- SHA512 702bc9064060cab5b37d497e42ec474a2d6df271c8a2337819699a3818b795ac63c699ad332543ebd614b6a3920ca2275de43cd037af08753dfb17ec7e259a32
- SSDEEP 96:90ygjwbrfK7jEppVfNbOKqsJs9HxdYTe6iewVwqk09iN2nl3vp7x7pyhOa:mygjwPgjEppVFbTs9HCe/1wqk0sN2nRu
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Russian (Russia).csv
- SHA256 8b142b0a0cc4b82c187b2e10c56df771b5562c54dc6a88037326d1e0c6bb8903
- MD5 31f2d18b30d3db84f9dcee36618df65f
- SHA1 eb2c517fa9a3eb6973f989d215b5ff65d7727b8e
- SHA512 f182821eed9858ebdaac9c0cc9d2a6802f78e44ca936207218d3eb9196fa0678a46a79fba45f07794372c30c08d11511f444a83e7d767ab506b2a39442dde2e5
- SSDEEP 3072:79NJ6PC4JHTYtGx3I1msatcM8TfXBQR8vd26ku2727nkIyTBfqGphfmjfFfu4/IK:79NUCmtcvBQVRIyT/ph+jfFfu4/Ip4
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Russian (Russia).png
- SHA256 91b39b9ccbf34db4f6adc71c49ef3e90f018a8c41b87d8ad2602ca8f49121a9e
- MD5 b9d768828ba2744cf5da878a316de8f0
- SHA1 2488a7b32ed72db88fb484494daec6cec0ad63bf
- SHA512 edb475443ae4ec36fd7dff58a8136b2a43c3e461d16966cefd7ea4bc6def869d770fa12fee3f52b0c4e1d4020f0c500983853cead7fec2085d8158221a90785b
- MD5 SHA1 SHA512
Resources/Translations/Simplified Chinese (China).WordCloud.Ignore.txt
- SHA256 ceb72559158efdce5208e64fdb6b9ef57ac5614156973eb43c6dde334d8391b1
- MD5 6d3861101b236820c874d21cab412930
- SHA1 91ddd93af5a900c2b04a0645b4efd63dfa955ca8
- SHA512 fc6ce8b92dfd18dd95ab951f0b03571023aa42122c903fb21262b7ec392f109644e31d80d0faed349e51f6600e635c94911d61d624f7dcddca74d53fb6629573
- MD5 SHA1 SHA512
Resources/Translations/Simplified Chinese (China).csv
- SHA256 5a50edcc380ec472f52ec52f210c1d32b0a148c40231618cc49cd8f7b112661c
- MD5 6e80eba74ea5c3f686287b32e3f67fb6
- SHA1 3b2d62ac947c4527fde5f01f36a199f02672b25a
- SHA512 4f363bef773bb2e3bd45b24f9ccab0f506ad5b0840e90b8744a20faa253a7edcc7e91f4bb52fdc7bac178ef2ad510ff11bffd67d4e9b320df21c0ca9d7f78278
- SSDEEP 1536:YfzYfdRFWFirvn8bEFosNgovQv47d2NaHBsHFqiCDcGVBULraTp+OTRIGA8ie5R:Y0XFWF08bQZgyQvkGHkv7ULraTZmsiQ
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Simplified Chinese (China).png
- SHA256 3f9ec2dc7671fadf09ed967b4c3ad9aec1ff2c7084202b48bfcbc04f4545d42e
- MD5 dbaf3e07d5d80863bfea04c647db8319
- SHA1 df189b3c22c725c318d5910197fb498980cdf577
- SHA512 ba8161ffb9a1bbc38ef7eb68a706252aa2eb9bba2afcf9b005d8fcc258f3fee3e1f5d56244d4231356be139c4b1f3f55380c41256657b17daf3e2864cc9cc671
- MD5 SHA1 SHA512
Resources/Translations/Slovak (Slovensko).WordCloud.Ignore.txt
- SHA256 a85016f7da534a594cdceaccd60b9db7e06e5f481aa0077bd62dd30a51ca3ce6
- MD5 d0fa510390f1b0bf8ad10d3e5178a21e
- SHA1 303e711d0ebfe3a7d223391e32e60a5b9eb5e17e
- SHA512 ecff7bf535a1842c6230cad673291b410f8d60e8b4d360d28f6e07aefd17c52c0fcfa659a4b9437dc04639b658d9700907ab3115f653d385b4fa1a0137308851
- MD5 SHA1 SHA512
Resources/Translations/Slovak (Slovensko).csv
- SHA256 79356fe25f7732f34eb19d0932119ac5f99c9518fc14496ece32b43aed93b2aa
- MD5 3db06d4eb22388d31fc02414a9907a29
- SHA1 208658e9e90629b3b5e40e729f757fb16a667c96
- SHA512 cfb0f0c2ca5acec5ce51cf03b9755b83e6da78f6b5661b78c2e60c6cad50de6a054a05f1347449d0dbbc0cda40c00f44ea583089ae0834306a0517405ef94e67
- SSDEEP 1536:zJS8nrqTo8JOQTX2CRsTQF40040osztylHLncNvr4/u3jbN1UCUpbbybw/RpnRbw:RrCjJOQTGCf8pklHwh3V1Opbiw/qMt4
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Slovak (Slovensko).png
- SHA256 d1355a84e9fb2a9af5356965011e1373b25ceb79bfa2e71c684ee732dbcd89d8
- MD5 0d383009d1c6a2f67f1c1b8cd8dbfd04
- SHA1 8d91adfaf2b40b2f49da638a9ccb0f7d2ef2f8a8
- SHA512 706ffd74b50abbe59127b826f00f1cfd6fcbeb50fea993a7054e702fce9bc495d7e253148ef8c2066355f0387ac6e53e942e3efcfcda2fcc713c27b2bf39109e
- MD5 SHA1 SHA512
Resources/Translations/Slovenian (Slovenia).WordCloud.Ignore.txt
- SHA256 ef11e2661caf809240b867354224cda20706d542a2e80c84f983cf728e057d6b
- MD5 69e7d9a7378b3f942e83e8e26dc2a44b
- SHA1 c560845fb8e6ea96513c6fcf7a06a7b22f1a0889
- SHA512 9255d7f6288fa88de06de780da374f7c7a2b4fc8b69376db29dc41bdd9f1d42cbc8e11605e5375f87b9e0b37903907f5107b8be7a2133a0789d2c86460874abf
- MD5 SHA1 SHA512
Resources/Translations/Slovenian (Slovenia).csv
- SHA256 1f3d76cefb246b7361bbd4dad3551d490b434d11336aa757ade616bc6a4c42ca
- MD5 f62f39d4fdfd3a051ec745318a91420b
- SHA1 9c66fa7b629a3f2e47bcfc0eab82c482c8215e0e
- SHA512 90240b95f87eb643e791f36a3c4f5282fca2d1f625e4a2a11b645be5015a525a31ed51917492466aa780d1a83ed699e1315adf775218c8b0eb7709b4e4714728
- SSDEEP 3072:UiWClqFEF/I77oB9RhJW0AK/b2kekkDKVg7YGL0QcPG5MnhmvIklVBrrwjYPwHdd:TPMFEFA7EB9RnW0AYb2kekkDKVg7YGL2
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Slovenian (Slovenia).png
- SHA256 2d39ddd67274e4f798c28c8808b4b0b331eb1bc61fa40334e644ab977d47bb4e
- MD5 aa445112fae9f3e563a9e68bdac9e9ae
- SHA1 36d71d2382d55dcb570ea47292eec2c613d49ba3
- SHA512 6d5877b095ec1a0143cbfc26fe6318b61fe0539a9c36cb8f08e9d6fbf617ef6216c4da2cb90d913885f4f545a14444a01bac6ca36c091809af4d68bb00b4f559
- MD5 SHA1 SHA512
Resources/Translations/Spanish (Spain).WordCloud.Ignore.txt
- SHA256 9de96383c1a31f893d99b0e43a2135e37c09e0a78305d487ee1cbfc8e434ffdd
- MD5 821c78c7b4e6313090b95e9d7180ca28
- SHA1 e55a754284b359f93dba183ca0629663924b9d80
- SHA512 9bfd39f5da69da356a19d4401489a609e999a5584dfd3c576b4c16d2a557cf660f6693b534ebcf467d9fc8fa81a0441636e43d9733caa2b50f3f074da06754f3
- MD5 SHA1 SHA512
Resources/Translations/Spanish (Spain).csv
- SHA256 a395839eea446d2d6290d72a763c96600fd1307ff8a3df497243d4781a27afe5
- MD5 9af5ef9300576be17899ab26d08b3c35
- SHA1 09d374ed65d9b2412ca42be1d0f3752b1c35309d
- SHA512 e96a39cef0a9f1012f3a9af6074571588b39bf9be02954994035cf487a98879f8e06f4d763d1b3153052b9d9c854896d6f0b589ec27380affea7fb04d2ffd842
- SSDEEP 1536:RYvRnMfbFjBUM85jTveB4GkG2k6xt7HHw3V+JwYRIauEeXC3FVQKOvrgBlL1cz/T:R3blBUM8MnkpPqYRnewYz/iH2
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Spanish (Spain).png
- SHA256 04d2c79e91aebc769e12c2cb2575fe38de2f0815c614a895a656953d29121ea6
- MD5 76cd2dacd362d049c058a20428b72280
- SHA1 43f60e3e242c05d77ff7b252aa51e269470d531c
- SHA512 cdd3c2b7c764076c1026eb82a2e17f05b0f79e96afdaf350adbc556e858eb7290052e96be6eca9ccab1a86996ff60feb5420f788c1e786ff5b7a54f667420ef5
- MD5 SHA1 SHA512
Resources/Translations/Ukrainian (Ukraine).csv
- SHA256 56f50ed4f5aade25cedef1b315a0a98a2a77d6de3b5666db2dde0060491b5b95
- MD5 179bb7661da3238c49ac26f0863858e3
- SHA1 2dfe7598b346a71ed1a2a543747b36beac4670ed
- SHA512 b35e3082971adab25c48ac8542cb4c7f9bdd033148adb66be96bb07742447887b6c1676aa61990953ff7713d5335d07e907c2a4177d6028cf01261d6e19ba96b
- SSDEEP 1536:9JST36qP5KkFUNAHrYx/I16kLuua6mXCb4:K36qk2NBd3ECs
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Ukrainian (Ukraine).png
- SHA256 127d81b02ecdc084a5927a941b17fcf2469908bfab5563210d31aa1726084250
- MD5 4d0e7215ec7f7f19058551ca75bada0b
- SHA1 c673a884475470df7891d3b8575267b1b3b7de22
- SHA512 7296643049acda2860cb4c0b855597d4f471d799a253d1171342dd8a3116c40c3a548f1e3ef36ef599626eaa620d8d99f3ea474a7338201987e8f45f746c8933
- MD5 SHA1 SHA512
Resources/Translations/Ukrainian (Ukriane).WordCloud.Ignore.txt
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
Resources/Translations/Vietnamese (Vietnam).csv
- SHA256 18dae56e3f2e6db73154267f68b9d5555638fe2aaef4b344f13a27e98cc32a78
- MD5 5c3448aae16e463d56fb25ab8130dafb
- SHA1 0bf24c1402b346a5b8eb30578f5ebdf07cd5915b
- SHA512 121bb244699fc4ad2331f9da852202385f228c5223c41484bcc4773e3033d41c07c2e80788fff98c0c19d62687ccd35be77b74d298ac2ac4ebc8220e5b26bf95
- SSDEEP 3072:O3mBLFlwLAZbabYgG8VhElTD0nzwn1bAwlElamBybNBk6RGIQRJzXhgwv0T1JyXT:UPC1bAwl+amByb/k6R6DXhlqov6TJ43Z
- MD5 SHA1 SHA512 SSDEEP
Resources/Translations/Vietnamese (Vietnam).png
- SHA256 52fc832a20f4d30be574612f293ab75628e0d09c98528bd91916c59719f82961
- MD5 ec9554cfbff41a04c09d01a237af6679
- SHA1 84c95ed5b11cfa8dc31b18788e229312eee3977e
- SHA512 6fa1ac02cb3a497164b827f330a3118739930ccab114c8d02d50c225eff2fc819a90201b91a2dadc9156507a3ffa46f246255a5e9c19c0b2b55643c3fdf60251
- MD5 SHA1 SHA512
Resources/Translations/YourLanguage.WordCloud.Ignore.txt
- SHA256 12f72d9fee6dbad9895004c9e7120c928c4c3d52571fc88a70295a33f8b7086e
- MD5 c9db1d08a11325da4127d5d70a602693
- SHA1 7beb878fff94469c2006ab6e38b2f42e3e81dc63
- SHA512 08e9fd19d3d64cd5460adcd42ef781736a522f09b375050d923b5db67ded376f807c824d5ee449a41103a1e590c17199b880f9b6e5e948d88f413b5e2cd6bc71
- MD5 SHA1 SHA512
Resources/Translations/YourLanguage.csv
- SHA256 9f2a019f87db9b86467575c2a4c26d0db74ad5b86a8be6a1da611839ea93ee72
- MD5 dd6fc330d8986651763db3bfa65cde78
- SHA1 a1e2c3eff968b9b020254edc61f6fc9c396474cf
- SHA512 a35e4caa27f8cb99fabd3c1d09d9b6ad0e9bc866dfecf3e05d78c0c78bc5881387dc4a024cf9ebfd75c4a433bfae62c347699900bc511b2a81225116098e117b
- SSDEEP 1536:VJST36q/cKWFUr8HJ4xBI1Cknuua6OXCTU:y36q9cP1B3cCw
- MD5 SHA1 SHA512 SSDEEP
RichEditExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21bf0d20c43ff4f4546416efaab4a12044c2edef862a1ef2b5f465f88935d8f7
- MD5 b7ae6a7d921d68e34bba7a487e270c0c
- SHA1 ab09270b753772283247104dff5dd6c704753fbd
- SHA512 736a3e55b1aa22ba3afffca3389353155f0827e046dbd01b072e7f97151bf11ea4da83f70a1ddc544c0dac3e92d4c6d4ed483247b84f5fb9dabc368aed60f18f
- SSDEEP 192:ZuVhj4SmsqB03JNsufuLX9Kg/mU8V4HOqu:Oj48qB03fJfaXPmU8WTu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\RichEditExtensions\obj\Release\RichEditExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rtf2HtmlBridge.dll
- SHA256 7c0f44e55eab9eb4d58c0604667305fc7dcaab32591e956b16ff2cb8aca127d7
- MD5 bcf5cfd98b71caf1d778e01b9d8dfb27
- SHA1 09ec3e4a60bb64243e425ba07cfd2c2285b680dc
- SHA512 97461a5abeec5880eae296e3f848aa2bf30fb2f42f077c020a60ab2741db4a24b2a008f3ddc1da096af81166700c2bc175b7dec8fe341e4d8e3a61b523e543b2
- SSDEEP 384:gn4mErdsZBVWqQQliKAkiC4XFzFpj5wUhrZUs3btuAE3ftTldIwkiwnn7PV:+EipWqQYAkbwzfRxuAE3lTrIp7d
- MD5 SHA1 SHA512 SSDEEP
ScrollHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a3aa473c7c5d891aff1562c49045ba85b45a587785c93f1fb3e1579443e87f3
- MD5 dd271ff79047c26829c229ce99c69004
- SHA1 cb3b7367e5bf879350ab8d3e5ff13db80f6ab282
- SHA512 12dc3bdc9ad5c87b04435e0a537234b1b3b8e7a7773db3c81e0ff05bc2720f00b040b3d8e46bf6c601f1f9f889354b4c0a835bb257cb409819b3fc878dd6c201
- SSDEEP 48:6V+TnlSATT+4kuv055JDcWe91traTyrlIuQGJcKYG/gHB8M8zEtdA1cwGVfiVp9o:p055JQWeLNJVB/gH6zExwCfrpkk6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\ScrollHelper\obj\Release\ScrollHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SpreadsheetContentControlBridge.dll
- IMPHASH 1fe50ea8806963f5f51e5721f20cd2bc
- SHA256 b045d6bb5d67713823ace1dbe2b06e774ea9b5178d5874b2ac6fa6e6abca0a5c
- MD5 e0133ed9b07fd51aadd79f07d0010edc
- SHA1 85e0f755f4f35532288798744e7d39dcbcc5d195
- SHA512 da44b56ffcfb80ed5972cff456a2531c5d1160bf276b123e7d6be952552316ea04b1e924fe34aabcfa703b81c043634e2a759c7d90791ee56e7912f37bf59d25
- SSDEEP 768:MF3ZANadknTKOuy2QUUw5vX6SmOBjrTbcEY1SmxAvzdLBPrmYzRlyQ49We9kEKQ3:MF3ZANukTKCbCTbcrIDPrmYzoeMTj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16156
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\SpreadsheetContentControlBridge.pdb
vcruntime140
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
IsDebuggerPresent
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
Sleep
TerminateProcess
user32
MoveWindow
RegisterWindowMessageW
SetParent
DestroyWindow
DestroyIcon
SetWindowLongW
LoadImageW
mscoree
_CorDllMain
CreateContentInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
716B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=49, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
SpreadsheetContentControlCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ede834dc7a913057ae026ee428ceced58c29b12f9061e0faf95d144640aa2f0
- MD5 6eee6600382cedd92d7f54aa6b82ccc6
- SHA1 e13a54a5d92542e0799db47839da27eef9f27fe9
- SHA512 d45dfa4cee171adbc87f8d035547a6da5c11a56978e6b84f9bb6b5ab463d9c467eb1c94dddbc6ab7171278cb64731fa3cea79330cde9c3ad17e6f1b4b3b3073a
- SSDEEP 768:mESbfhjaAgenfqhf7ffFroRrZJtG8Q5KGHLDn:T+jaAgMqhfLFr0NJ0nKGrDn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\ContentControl\SpreadsheetContentControl\SpreadsheetContentControlCore\obj\Release\SpreadsheetContentControlCore.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
TDLTransEdit.exe
- IMPHASH d7aac8839ba90b27e0471d7f0e9d1ac0
- SHA256 8aaaa89457aaabe58e76bb23e53e05bfdf7a8f13eae2529d3fef9f32a2f66dbf
- MD5 9090d426ab0eb7b7d2a63ca3fe63b168
- SHA1 2ed4e41fab5ff9e6cb997010dbad488ae975e440
- SHA512 bcc7ed8955ee6133b82905c0529c489292300a090b0252e4667bfaacbdbf634302c7846a1d8bf67cad9cf72b7c31ec20fb4cd8a44dac919bae82e8c83bba29ad
- SSDEEP 3072:sFzYO9lVAdrGJPPVw4bpfNbP8K9by0E64NUoSVXaYimjIXsV34vP6JT:sdDmAPPfptPZoknVXfiXdvP6x
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
144204
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42u
ord6874
ord6051
ord1768
ord4396
ord537
ord823
ord2836
ord2440
ord922
ord3434
ord6003
ord3993
ord4272
ord3288
ord3905
ord2036
ord2099
ord5446
ord5830
ord5436
ord6379
ord6390
ord398
ord700
ord5590
ord4184
ord2755
ord6654
ord6139
ord913
ord5628
ord699
ord397
ord4124
ord5568
ord2910
ord2912
ord2800
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord3898
ord798
ord1989
ord912
ord4183
ord1615
ord4199
ord6865
ord6920
ord533
ord2914
ord5462
ord6381
ord2858
ord6278
ord2806
ord3805
ord6279
ord926
ord6921
ord925
ord668
ord3306
ord2773
ord2762
ord356
ord665
ord354
ord2822
ord2805
ord4197
ord6867
ord654
ord341
ord6136
ord3976
ord6918
ord6919
ord927
ord1173
ord2362
ord6193
ord4282
ord3084
ord3133
ord3792
ord5977
ord2855
ord2854
ord6871
ord6211
ord4279
ord613
ord289
ord2706
ord6655
ord1826
ord5061
ord4629
ord4601
ord4710
ord4744
ord4602
ord2776
ord4369
ord4846
ord2507
ord4828
ord355
ord4224
ord3447
ord860
ord6597
ord3991
ord2857
ord4118
ord4018
ord6115
ord4688
ord5142
ord2081
ord924
ord859
ord4155
ord1634
ord2406
ord5785
ord5871
ord3568
ord3688
ord3621
ord5783
ord4128
ord4292
ord5784
ord2745
ord3566
ord2444
ord5781
ord640
ord1633
ord323
ord2088
ord3614
ord1840
ord2574
ord5286
ord3365
ord3635
ord693
ord556
ord567
ord809
ord4238
ord755
ord5790
ord5869
ord6168
ord470
ord6238
ord6896
ord2114
ord6754
ord3281
ord6451
ord6316
ord2862
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord2144
ord2559
ord3629
ord384
ord686
ord1635
ord2445
ord2400
ord1821
ord3397
ord3605
ord656
ord4270
ord2572
ord4394
ord3625
ord682
ord3016
ord1808
ord816
ord562
ord6166
ord6607
ord1932
ord4265
ord6375
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord5604
ord541
ord2756
ord801
ord4219
ord5276
ord1863
ord2746
ord6898
ord2810
ord2634
ord6399
ord6398
ord3865
ord3516
ord3517
ord2631
ord6191
ord2637
ord941
ord942
ord940
ord6195
ord3658
ord3296
ord2372
ord3087
ord4294
ord2371
ord2859
ord535
ord1165
ord1662
ord2644
ord2606
ord6330
ord3494
ord4704
ord3871
ord1143
ord1637
ord2430
ord3649
ord2576
ord4215
ord4229
ord2294
ord324
ord538
ord861
ord3592
ord4419
ord4621
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord4992
ord5261
ord540
ord6868
ord800
ord1197
ord858
ord296
ord5208
ord2506
ord641
ord617
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord5010
ord4667
ord1569
msvcrt
__dllonexit
_wcsdup
__CxxFrameHandler
_wcsicmp
wcscmp
_onexit
_wtoi
qsort
iswdigit
_controlfp
_CxxThrowException
fgetws
wcschr
fgets
_mbschr
wcslen
isdigit
_wsplitpath
_wmakepath
wcsncpy
_wcsnicmp
wcsncmp
_ftol
iswalnum
free
memmove
_purecall
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
kernel32
SetFileAttributesW
CloseHandle
DeleteFileW
GetACP
MultiByteToWideChar
GetLocaleInfoW
MulDiv
lstrlenW
GetStartupInfoW
GetLastError
GetFileAttributesW
GetCurrentDirectoryW
CreateDirectoryW
CopyFileW
GetTickCount
GetTempPathW
ExpandEnvironmentStringsW
GetModuleFileNameW
lstrcpyW
GetCurrentProcess
GetProcAddress
LoadLibraryW
GetModuleHandleW
lstrcmpW
GlobalUnlock
GlobalLock
GetCurrentThreadId
lstrcmpiW
GetVersion
lstrcpynW
LCMapStringW
GetVersionExW
WideCharToMultiByte
GetUserDefaultLangID
FreeLibrary
user32
ShowScrollBar
CallWindowProcW
ClientToScreen
DestroyIcon
GetMessagePos
DrawFrameControl
MapDialogRect
SetCapture
ReleaseCapture
RedrawWindow
GetClipboardData
KillTimer
GetLastActivePopup
SetTimer
TabbedTextOutW
GrayStringW
OpenClipboard
EmptyClipboard
CloseClipboard
IntersectRect
SetRectEmpty
CopyRect
IsRectEmpty
DrawFocusRect
PtInRect
GetClassNameW
CallNextHookEx
GetScrollInfo
DrawTextW
SetWindowsHookExW
UnhookWindowsHookEx
WindowFromPoint
SetWindowPos
ScreenToClient
GetWindowRect
GetDC
ReleaseDC
MessageBoxW
MapVirtualKeyW
GetFocus
EqualRect
GetParent
GetWindow
RegisterClipboardFormatW
GetMenuItemCount
GetMenuItemID
SetMenuItemInfoW
IsChild
IsWindowEnabled
SetWindowLongW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
IsWindowVisible
IsWindow
GetWindowLongW
GetMenuItemInfoW
UpdateWindow
EnableWindow
CheckMenuItem
RegisterWindowMessageW
GetSystemMetrics
SetMenu
LoadMenuW
EnumWindows
GetKeyState
GetKeyNameTextW
SystemParametersInfoW
SendMessageW
InvalidateRect
WindowFromDC
DrawTextA
LoadCursorW
LoadImageW
GetForegroundWindow
PostMessageW
EnableMenuItem
GetSysColor
OffsetRect
GetClientRect
InflateRect
IsZoomed
gdi32
Escape
TextOutW
RectVisible
PtVisible
SetDIBits
Polyline
ExtTextOutW
BitBlt
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
CreateSolidBrush
RoundRect
GetDeviceCaps
GetObjectW
CreateFontIndirectW
DeleteObject
GetTextExtentPoint32W
GetStockObject
advapi32
RegQueryValueExW
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
shell32
SHGetSpecialFolderPathW
comctl32
ImageList_Draw
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
_TrackMouseEvent
olepro32
ord252
shlwapi
PathIsRelativeW
PathCanonicalizeW
StrCmpW
msimg32
GradientFill
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Name
.text
Size
156KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=35, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=760, id=1, productName=Unmarked objects,
count=54, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TDLUninstall.exe
- IMPHASH c37909ff516e0df16cf7b5a994dee190
- SHA256 aafa597028ea62688afeedad4005e1b2a9e53fe9c3aa19e34bd5854d1094b1f2
- MD5 cec7e010860480c9173bf246c1401b4e
- SHA1 d1b52e796c6016486dbd92590b8e863c16b62d65
- SHA512 98a932e41b1dc54b3289481e960db7f47a24803050e00a1bdc3bcacd5e620b8ad8b611234c5c49f58003a3283ff69dd8430fecf536de2fe514dc2637b2a8c21a
- SSDEEP 768:I0ovSasUyej6yokVMcqrvWWWNMzcJb96VeyVr3IfSfUUpBd7UYKF8:sSatyux1ovWWgT9iFlIiU0BcF8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42u
ord6868
ord668
ord3306
ord2773
ord2762
ord356
ord2756
ord5568
ord2910
ord665
ord354
ord6654
ord2822
ord2805
ord942
ord2912
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord798
ord1989
ord533
ord4197
ord537
ord6381
ord6867
ord6918
ord6919
ord4155
ord1165
ord4273
ord6655
ord859
ord823
ord2914
ord5462
ord4272
ord4124
ord925
ord6921
ord941
ord6279
ord3805
ord922
ord6278
ord926
ord2755
ord3434
ord940
ord1569
ord535
ord4184
ord6874
ord6770
ord2810
ord913
ord861
ord4199
ord2606
ord6139
ord858
ord801
ord296
ord398
ord541
ord617
ord700
ord3658
ord5214
ord538
ord1197
ord1196
ord5208
ord800
ord540
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord2800
ord4269
msvcrt
_controlfp
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_mbschr
fgets
fgetws
_CxxThrowException
wcscmp
__CxxFrameHandler
_wcsicmp
wcschr
_wsplitpath
_wmakepath
iswdigit
wcslen
kernel32
FindNextFileW
FindClose
SetFileAttributesW
CloseHandle
DeleteFileW
MoveFileExW
GetModuleFileNameW
lstrcpyW
GetCurrentProcess
GetProcAddress
LoadLibraryW
GetModuleHandleW
FindFirstFileW
GetCurrentThreadId
lstrcmpiW
LocalFree
FormatMessageW
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetVersionExW
GetACP
GetUserDefaultLangID
GetStartupInfoW
WaitForSingleObject
GetLastError
GetFileAttributesW
RemoveDirectoryW
lstrlenW
CreateDirectoryW
CopyFileW
GetTickCount
GetTempPathW
ExpandEnvironmentStringsW
CreateProcessW
user32
RegisterWindowMessageW
CallNextHookEx
GetClassNameW
GetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
RegisterClipboardFormatW
PeekMessageW
TranslateMessage
IsDialogMessageW
DispatchMessageW
SetWindowLongW
advapi32
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
shell32
SHChangeNotify
SHGetSpecialFolderPathW
ShellExecuteW
shlwapi
PathCanonicalizeW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=19, version=8022,
count=10, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=335, id=1, productName=Unmarked objects,
count=17, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TDLUpdate.exe
- IMPHASH 6dd85c13562d726a41176ab0155ac52f
- SHA256 ec970a6816e015721ab661706eba8d90f6984efa4b080f4172cb767560274006
- MD5 834fdd5d97a0a467e09995beddcf919b
- SHA1 1b3f58b8d2b3622231fdaeedceab3d91ce1c2ba7
- SHA512 01893180c927a79c31e3ff8d41c443ae9a3c520859f5530b14dc0631f223ed4c37c0644733c47f65a1c4515aad51fe16cfb43fe13192af9a9d619b009a97b2f4
- SSDEEP 6144:bEPWNL55FAOlujJ7J2EeNnsITo0Tk9/J3S1IPFdo:xXgjVJeNnsITvTI/XPFm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93508
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42u
ord6770
ord4184
ord3434
ord2755
ord926
ord6278
ord3805
ord6279
ord941
ord6921
ord4124
ord4272
ord6868
ord668
ord3306
ord2773
ord2762
ord356
ord2756
ord5568
ord2910
ord665
ord354
ord6654
ord2822
ord2805
ord942
ord2912
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord5774
ord2598
ord5188
ord3175
ord3178
ord3171
ord3506
ord3719
ord798
ord1989
ord2800
ord533
ord4197
ord6381
ord6867
ord654
ord341
ord5854
ord6136
ord6918
ord6919
ord2371
ord4229
ord2836
ord2099
ord2114
ord4155
ord5446
ord5436
ord6379
ord6390
ord2859
ord470
ord2854
ord5871
ord3871
ord3312
ord2746
ord4078
ord2706
ord4273
ord6655
ord1634
ord2406
ord5785
ord2855
ord3568
ord3688
ord3621
ord5783
ord4128
ord4292
ord5784
ord2745
ord3566
ord2444
ord5781
ord640
ord1633
ord323
ord3614
ord1173
ord913
ord1930
ord6193
ord4282
ord3084
ord3792
ord6871
ord4279
ord859
ord2914
ord397
ord699
ord2862
ord1899
ord1829
ord1792
ord1831
ord1890
ord1897
ord1826
ord6451
ord4472
ord1808
ord5624
ord1644
ord2455
ord909
ord4180
ord394
ord696
ord3638
ord2400
ord4224
ord755
ord6168
ord4270
ord6124
ord3747
ord5142
ord4118
ord6597
ord816
ord562
ord1821
ord2423
ord1088
ord1932
ord4265
ord3016
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord6489
ord5462
ord1863
ord861
ord4199
ord6139
ord296
ord398
ord617
ord700
ord3658
ord5214
ord1172
ord2101
ord535
ord940
ord2606
ord6898
ord3993
ord4970
ord4704
ord289
ord538
ord3991
ord613
ord4253
ord2294
ord6481
ord567
ord541
ord2810
ord537
ord922
ord858
ord6874
ord5857
ord4419
ord2047
ord4435
ord4829
ord5283
ord1767
ord6048
ord2506
ord4992
ord4848
ord4371
ord5261
ord4352
ord4942
ord4736
ord4899
ord5154
ord5156
ord5155
ord3635
ord3365
ord5286
ord4396
ord2574
ord6593
ord823
ord4709
ord5977
ord4294
ord3087
ord2634
ord6211
ord2638
ord4254
ord768
ord801
ord693
ord6485
ord6564
ord1165
ord6525
ord6740
ord4425
ord4621
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2046
ord2640
ord4433
ord4831
ord3793
ord5284
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord2520
ord6584
ord1197
ord5208
ord800
ord540
ord925
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord4667
ord1569
msvcrt
__CxxFrameHandler
_purecall
memcmp
_wcsicmp
wcschr
_wsplitpath
_wmakepath
wcscmp
calloc
fclose
fseek
ftell
fwrite
fread
fopen
memcpy
memset
_wtol
iswdigit
wcslen
free
qsort
wcsrchr
_wcsdup
isspace
_CxxThrowException
fgetws
fgets
_mbschr
malloc
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp
kernel32
CopyFileW
CreateDirectoryW
GetCurrentDirectoryW
lstrlenW
GetFileAttributesW
RemoveDirectoryW
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetTickCount
CreateFileW
SetFileTime
CloseHandle
DeleteFileW
GetLastError
MoveFileExW
MulDiv
Sleep
lstrcpyW
GetModuleHandleW
GetProcAddress
GetTempPathW
GetTempFileNameW
ExpandEnvironmentStringsW
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
LoadLibraryW
GlobalUnlock
GlobalLock
GetCurrentThreadId
lstrcmpiW
FreeLibrary
GetCurrentThread
LocalFree
LocalAlloc
FormatMessageW
GetVersionExW
GetACP
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetFullPathNameW
WriteFile
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
GetUserDefaultLangID
SetLastError
GetStartupInfoW
SetFileAttributesW
VirtualQuery
InterlockedCompareExchange
VirtualProtect
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
DebugBreak
VirtualAlloc
user32
MapDialogRect
KillTimer
SetTimer
TabbedTextOutW
GrayStringW
GetSystemMetrics
GetKeyState
PeekMessageW
DispatchMessageW
IsDialogMessageW
TranslateMessage
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
IsWindowVisible
GetWindow
RedrawWindow
GetDesktopWindow
DrawIconEx
IsRectEmpty
SetCursor
LoadCursorW
LoadImageW
GetDC
ReleaseDC
PtInRect
GetMessagePos
ReleaseCapture
SetCapture
EndDeferWindowPos
BeginDeferWindowPos
DestroyIcon
wsprintfW
DrawTextW
GetFocus
GetDlgItem
CopyRect
InflateRect
InvalidateRect
SystemParametersInfoW
OffsetRect
RegisterWindowMessageW
GetSysColor
ClientToScreen
PostMessageW
SendMessageW
UpdateWindow
IsWindow
IsWindowEnabled
FillRect
GetSysColorBrush
GetClientRect
EnableWindow
GetParent
CallWindowProcW
DefWindowProcW
CallNextHookEx
GetClassNameW
GetWindowLongW
SetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
RegisterClipboardFormatW
GetWindowRect
gdi32
Escape
TextOutW
RectVisible
PtVisible
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
RoundRect
GetDeviceCaps
CreateFontIndirectW
SetTextColor
SetBkColor
SetBkMode
CreateSolidBrush
GetStockObject
GetObjectW
SelectObject
GetTextExtentPoint32W
DeleteObject
advapi32
RegQueryValueExW
OpenProcessToken
GetUserNameW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
shell32
ShellExecuteW
SHGetSpecialFolderPathW
comctl32
_TrackMouseEvent
ole32
CoCreateInstance
oleaut32
SysFreeString
VariantClear
SysAllocString
urlmon
URLDownloadToFileW
shlwapi
PathCanonicalizeW
PathIsRelativeW
StrCmpW
wininet
InternetQueryOptionW
DeleteUrlCacheEntry
msimg32
GradientFill
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
124KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=35, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=818, id=1, productName=Unmarked objects,
count=11, id=10, version=8966,
count=66, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
ToDoList.exe
- IMPHASH e0d220dbde80f0954215d5a3800bd7a3
- SHA256 9f08e230c1accab40d71f8414b55ce1b32483c88815d2680ddb5bba4c7513052
- MD5 01d30221182cc28542626be1ed94562c
- SHA1 021b544803eaf0f7c1dc048673408e7e6347f406
- SHA512 fcff3533fcfc631eda859be736340725c46bfc1affb8e39f0946936774469bd8d929fe54b444e2d689b5c68f35e2ab9f917ea7f8fa41041ea489f7d68b1620cd
- SSDEEP 24576:QA0sVhAO7E+LhdCFc5UzhyZowOfc3lKUz+p69YoRu6GSVFNBzDiYyzMpbh0K/qOW:dj178F0dqKduK/tVYV7CcfoIr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2135524
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42u
ord470
ord2854
ord3871
ord3312
ord4078
ord2706
ord2567
ord6051
ord4073
ord1768
ord4390
ord5237
ord2377
ord5157
ord6370
ord4347
ord3793
ord4831
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord4621
ord3569
ord2070
ord4294
ord2371
ord4401
ord384
ord3867
ord4118
ord755
ord6168
ord2372
ord6865
ord3792
ord3084
ord6195
ord5977
ord2644
ord1662
ord6597
ord6920
ord4273
ord2776
ord6655
ord924
ord859
ord3982
ord711
ord413
ord4229
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5276
ord4419
ord3592
ord809
ord2114
ord5706
ord3284
ord4158
ord6617
ord807
ord554
ord556
ord325
ord4704
ord2914
ord1826
ord5061
ord4629
ord4601
ord4710
ord4744
ord4602
ord5010
ord4369
ord4846
ord2507
ord4828
ord355
ord4224
ord6399
ord3447
ord3517
ord5286
ord3397
ord3706
ord783
ord567
ord4270
ord2104
ord933
ord939
ord935
ord937
ord920
ord3049
ord836
ord5210
ord6664
ord834
ord5929
ord3875
ord3420
ord3050
ord832
ord3051
ord929
ord919
ord5852
ord2559
ord3629
ord1635
ord2445
ord2400
ord536
ord397
ord699
ord1834
ord1789
ord1899
ord1829
ord1792
ord1831
ord1890
ord1897
ord3087
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord768
ord489
ord4253
ord6451
ord818
ord4472
ord324
ord1808
ord1761
ord6871
ord5624
ord1644
ord2455
ord909
ord1173
ord4180
ord394
ord696
ord3638
ord1243
ord5268
ord2362
ord5267
ord2350
ord319
ord2293
ord2351
ord2331
ord2290
ord2332
ord2291
ord2294
ord1930
ord6193
ord4282
ord2072
ord3133
ord3798
ord5858
ord6140
ord2634
ord6211
ord4279
ord3491
ord2144
ord2081
ord609
ord2423
ord1088
ord816
ord562
ord6166
ord1821
ord3605
ord656
ord5506
ord1640
ord429
ord3443
ord1657
ord5228
ord5264
ord5571
ord2133
ord434
ord433
ord432
ord2385
ord464
ord1932
ord4265
ord6375
ord3016
ord4109
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord6607
ord3222
ord3403
ord3753
ord3737
ord6124
ord3747
ord5142
ord3380
ord2078
ord4042
ord6330
ord6489
ord1137
ord5462
ord4155
ord4028
ord3579
ord543
ord803
ord6303
ord521
ord2715
ord2382
ord3054
ord5094
ord5097
ord4461
ord4298
ord3345
ord5006
ord975
ord5468
ord3398
ord2874
ord2873
ord4146
ord4072
ord5233
ord2641
ord1658
ord4421
ord3618
ord674
ord366
ord4237
ord4430
ord4451
ord4493
ord2111
ord2109
ord2004
ord6878
ord5278
ord3865
ord6376
ord6191
ord4589
ord2858
ord6266
ord6374
ord3805
ord616
ord2857
ord5024
ord4718
ord4901
ord4803
ord5048
ord795
ord4532
ord4768
ord4975
ord4331
ord4577
ord5248
ord5047
ord6456
ord6594
ord6584
ord5284
ord4433
ord2046
ord4425
ord6525
ord6485
ord6564
ord4254
ord4709
ord2638
ord6593
ord6481
ord3393
ord3728
ord810
ord4668
ord6004
ord3995
ord3298
ord3282
ord4120
ord2637
ord2403
ord2015
ord4213
ord2570
ord4392
ord6732
ord6498
ord6776
ord2574
ord4396
ord3365
ord3635
ord6898
ord3993
ord3991
ord5949
ord5815
ord3642
ord837
ord930
ord838
ord6777
ord1105
ord3577
ord2631
ord5945
ord4470
ord6130
ord4524
ord4538
ord5681
ord3269
ord3348
ord3574
ord439
ord736
ord5491
ord1840
ord1933
ord5867
ord3296
ord3281
ord3905
ord6896
ord6631
ord2577
ord6150
ord2522
ord4359
ord4051
ord5467
ord4116
ord2381
ord5079
ord1702
ord1707
ord4398
ord5230
ord6365
ord5254
ord2436
ord3289
ord3479
ord6065
ord2003
ord3290
ord4360
ord1703
ord1708
ord5275
ord5058
ord5244
ord3725
ord6237
ord6316
ord3714
ord793
ord6910
ord6758
ord2053
ord1196
ord3909
ord1612
ord3694
ord5599
ord3221
ord6003
ord1941
ord6437
ord6238
ord2092
ord2085
ord3288
ord6882
ord6754
ord4400
ord3724
ord5812
ord3603
ord4638
ord1764
ord6362
ord2405
ord2016
ord4212
ord3572
ord2932
ord5886
ord3092
ord3716
ord4219
ord2809
ord326
ord2115
ord3292
ord3291
ord3356
ord2359
ord4677
ord2680
ord6771
ord2108
ord1794
ord1615
ord4447
ord5259
ord3703
ord3870
ord6466
ord6880
ord6668
ord941
ord942
ord1143
ord1637
ord2430
ord3649
ord2576
ord4215
ord4199
ord2756
ord2717
ord686
ord693
ord4197
ord6868
ord641
ord3494
ord925
ord2506
ord6113
ord2520
ord2810
ord3434
ord5628
ord4184
ord6770
ord913
ord5590
ord2057
ord296
ord398
ord617
ord700
ord5214
ord4037
ord3211
ord6919
ord6918
ord3976
ord765
ord1898
ord1921
ord472
ord5787
ord1230
ord3687
ord4221
ord2100
ord565
ord817
ord5711
ord5285
ord4693
ord2718
ord5299
ord1940
ord283
ord1787
ord5856
ord500
ord6138
ord772
ord5996
ord3477
ord6063
ord5033
ord6354
ord3478
ord6064
ord3283
ord4448
ord4260
ord529
ord796
ord1922
ord5854
ord341
ord654
ord6867
ord5438
ord6381
ord1971
ord537
ord533
ord5180
ord2800
ord1989
ord798
ord3719
ord3506
ord3171
ord3178
ord3175
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2912
ord2805
ord3319
ord6654
ord354
ord665
ord2910
ord5568
ord6773
ord5857
ord4053
ord6874
ord3176
ord356
ord2762
ord2773
ord3306
ord668
ord5679
ord4272
ord4124
ord6921
ord926
ord6279
ord940
ord2806
ord922
ord6278
ord2755
ord5830
ord2440
ord3614
ord2088
ord323
ord1633
ord640
ord5781
ord2444
ord3566
ord1172
ord2745
ord5784
ord4292
ord4128
ord5783
ord3621
ord3688
ord3568
ord5871
ord6136
ord2822
ord2859
ord289
ord2855
ord5785
ord613
ord3898
ord2099
ord2036
ord1165
ord2406
ord1634
ord2746
ord6139
ord6379
ord5436
ord6390
ord5446
ord1863
ord2836
ord4262
ord3389
ord4280
ord4283
ord3634
ord4395
ord2573
ord4214
ord6708
ord6516
ord6736
ord4029
ord2550
ord3450
ord2082
ord357
ord3807
ord4266
ord6712
ord682
ord3625
ord4394
ord2572
ord683
ord3626
ord3285
ord6605
ord6433
ord404
ord703
ord3056
ord4127
ord2373
ord3758
ord1262
ord781
ord1772
ord4752
ord1712
ord5263
ord4055
ord4220
ord692
ord3347
ord4391
ord2568
ord2538
ord4018
ord4238
ord4474
ord6911
ord6504
ord329
ord5978
ord1177
ord2443
ord2139
ord643
ord1561
ord5714
ord6778
ord5917
ord3740
ord4222
ord293
ord2505
ord4428
ord4198
ord2248
ord2442
ord465
ord857
ord2127
ord6339
ord502
ord774
ord5584
ord980
ord5454
ord6394
ord4491
ord1126
ord5878
ord5080
ord6142
ord4263
ord4688
ord6115
ord3915
ord2579
ord804
ord291
ord6174
ord2916
ord5880
ord3810
ord5480
ord2084
ord2915
ord539
ord1240
ord1571
ord600
ord826
ord269
ord860
ord927
ord6419
ord2862
ord5208
ord2606
ord541
ord5604
ord801
ord535
ord858
ord559
ord812
ord3658
ord1202
ord1131
ord823
ord1197
ord861
ord4269
ord825
ord561
ord540
ord815
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5303
ord4692
ord4074
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2546
ord4480
ord800
ord1186
ord538
ord1569
msvcrt
wcschr
isdigit
_wsplitpath
_wmakepath
towupper
wcsncpy
iswdigit
_wcsnicmp
wcsncmp
wcslen
rand
srand
time
wcstod
_strdup
setlocale
towlower
qsort
_purecall
wcsstr
toupper
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
swscanf
_initterm
_wtol
_wcsicoll
wcstoul
wcstol
swprintf
ceil
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
isalpha
localtime
_mbschr
fgets
fgetws
_CxxThrowException
_wcsicmp
memset
memcpy
_ftol
free
__CxxFrameHandler
_wtoi
_CIpow
memmove
wcsspn
isspace
floor
malloc
_controlfp
__setusermatherr
_wcsdup
wcscmp
kernel32
ResumeThread
GetCurrentProcessId
lstrcatW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetLastError
GlobalSize
GetUserDefaultLangID
GetPrivateProfileStringW
InterlockedIncrement
GetTimeFormatW
LocalAlloc
GetDriveTypeW
InterlockedDecrement
SetEndOfFile
GetFileSize
GetDateFormatW
SystemTimeToFileTime
LocalFileTimeToFileTime
lstrcmpiW
GetCurrentThreadId
lstrcpynW
GetVersion
FreeLibrary
GetNumberFormatW
GetCurrencyFormatW
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetComputerNameW
GlobalAlloc
GlobalFree
FormatMessageW
LocalFree
GetCurrentThread
GetVersionExW
GlobalLock
GlobalUnlock
GetSystemDirectoryW
GetWindowsDirectoryW
lstrcmpW
GetCurrentProcess
GetModuleFileNameW
CreateProcessW
ExpandEnvironmentStringsW
GetTempFileNameW
GetTempPathW
MoveFileW
GetTickCount
CopyFileW
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetLongPathNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
SetFileTime
DeleteFileW
MoveFileExW
GetProcessHeap
HeapAlloc
HeapFree
GetACP
MulDiv
RemoveDirectoryW
OpenProcess
SetFileAttributesW
Sleep
lstrlenW
LoadLibraryW
CloseHandle
CreateMutexW
GetLastError
lstrcpyW
GetModuleHandleW
GetProcAddress
lstrlenA
VirtualQuery
InterlockedCompareExchange
VirtualProtect
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
DebugBreak
VirtualAlloc
SetThreadPriority
WinExec
InterlockedExchange
GetStartupInfoW
user32
AppendMenuW
IsMenu
GetMenuItemInfoW
SetMenuItemInfoW
GetSubMenu
DeleteMenu
GetMenuState
ModifyMenuW
GetMenuStringW
SetMenuInfo
GetMenuItemCount
GetMenuItemID
InsertMenuW
PostMessageW
GetKeyState
MapVirtualKeyW
GetKeyNameTextW
GetKeyboardLayout
OpenInputDesktop
CloseDesktop
GetLastInputInfo
PeekMessageW
DispatchMessageW
UpdateWindow
TranslateMessage
EnumClipboardFormats
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
PtInRect
FillRect
EnableWindow
GetFocus
GetDlgItem
InvalidateRect
IsWindowEnabled
GetSysColorBrush
CallWindowProcW
DefWindowProcW
DrawTextW
GetWindowThreadProcessId
RegisterClipboardFormatW
LoadBitmapW
DrawIconEx
GetIconInfo
GetWindowLongW
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
MessageBoxW
WindowFromDC
GetClientRect
IsRectEmpty
DrawTextA
GetTabbedTextExtentW
SetCursor
LoadCursorW
LoadImageW
GetDC
ReleaseDC
CopyRect
InflateRect
DestroyIcon
LoadMenuW
GetSysColor
GetForegroundWindow
GetParent
IsWindow
SendMessageW
SetForegroundWindow
GetDesktopWindow
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowRect
GetSystemMetrics
ScreenToClient
ClientToScreen
GetWindowTextW
wvsprintfW
GetWindow
EqualRect
IsChild
GetNextDlgTabItem
ChildWindowFromPoint
WindowFromPoint
CopyIcon
SetRect
MapDialogRect
RedrawWindow
SetCapture
ReleaseCapture
GetMessagePos
TrackPopupMenuEx
IsClipboardFormatAvailable
GetClipboardFormatNameW
wsprintfW
KillTimer
GetDlgCtrlID
GetLastActivePopup
ShowScrollBar
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowLongW
GetClassNameW
CallNextHookEx
DrawFrameControl
SetRectEmpty
IsWindowVisible
SetTimer
TabbedTextOutW
GrayStringW
GetScrollPos
SetParent
BeginDeferWindowPos
EndDeferWindowPos
SetWindowPos
DeferWindowPos
GetScrollInfo
GetCapture
IsZoomed
CheckMenuRadioItem
TrackPopupMenu
SetMenuDefaultItem
SetMenu
RegisterHotKey
UnregisterHotKey
LockWindowUpdate
SetActiveWindow
SetFocus
RegisterClassW
LoadIconW
GetClassInfoW
IsCharAlphaNumericW
GetDoubleClickTime
TrackMouseEvent
GetWindowDC
DrawFocusRect
GetActiveWindow
CreateWindowExW
GetCaretPos
DrawEdge
ScrollWindowEx
SetScrollPos
SubtractRect
GetScrollRange
EndPaint
BeginPaint
ShowCaret
FindWindowW
FindWindowExW
DrawAnimatedRects
DestroyCursor
GetCursor
PostThreadMessageW
EnumWindows
SendMessageTimeoutW
RemoveMenu
CheckMenuItem
EnableMenuItem
MessageBeep
DestroyWindow
SetWindowTextW
DragDetect
MoveWindow
ShowWindow
GetCursorPos
CreatePopupMenu
UnionRect
IsDialogMessageW
gdi32
GetTextColor
Polygon
GetDIBColorTable
Escape
TextOutW
RectVisible
PtVisible
SetDIBits
ExtTextOutW
BitBlt
SetTextColor
SetBkColor
SetBkMode
SelectObject
DeleteDC
GetDIBits
SaveDC
RestoreDC
DeleteObject
CreateFontIndirectW
GetObjectW
SetPixelV
Rectangle
Polyline
GetWindowOrgEx
LineTo
MoveToEx
GetCurrentObject
SetTextJustification
EnumFontsW
CopyMetaFileW
CreatePalette
RealizePalette
GetStockObject
GetDeviceCaps
GetTextExtentPoint32W
GetTextMetricsW
RoundRect
CreateSolidBrush
CreatePen
GetBkColor
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
advapi32
RegDeleteKeyW
OpenProcessToken
GetUserNameW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueW
RegQueryValueExW
RegEnumValueW
RegEnumKeyW
GetTokenInformation
shell32
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
StrStrW
SHGetFileInfoW
ExtractIconExW
SHChangeNotify
SHGetSpecialFolderPathW
ShellExecuteW
DragQueryFileW
Shell_NotifyIconW
DragFinish
comctl32
ImageList_GetImageCount
ImageList_Remove
ImageList_Draw
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create
ImageList_DragEnter
ImageList_DragLeave
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_ReplaceIcon
ole32
StgCreateDocfile
CoCreateInstance
OleCreateFromFile
OleCreateLinkToFile
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleSetContainedObject
OleRun
CoInitialize
CoUninitialize
olepro32
ord252
oleaut32
GetErrorInfo
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysAllocString
OleLoadPicturePath
VariantClear
urlmon
URLDownloadToFileW
shlwapi
PathCanonicalizeW
PathRelativePathToW
PathIsURLW
UrlCreateFromPathW
PathCreateFromUrlW
StrCmpW
PathIsRelativeW
msimg32
GradientFill
rpcrt4
UuidFromStringW
wininet
DeleteUrlCacheEntry
InternetQueryOptionW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
winmm
PlaySoundW
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
444KB
Virtual Size
442KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
176KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
520KB
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=15, id=19, version=8022,
count=50, productName=Unmarked objects (old),
count=20, id=19, version=8034,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=1308, id=1, productName=Unmarked objects,
count=328, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
ToolStripToolTip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c37bae5fca45ba40218c96a274cfff9d82bedababa8e0cb968300d7211274856
- MD5 bf589026d79ecd04ac47ec28a0e7a785
- SHA1 7d0b9f6478422f81addb0d6d7d48b1b9f3396272
- SHA512 71fe8a8a1e7beb70c8419e69d0eed45624f080c63a84a8d7289ff9423df7a523d6a2e74b4e772bfcff899cb165ffa354dbf6318cbc57de9786ec08563ecf4bfe
- SSDEEP 96:2G4FakOB5NZ8j7jjfRwdxbj4ZwCSB8DhjHB562zJQm7wmGOWvbWivBC4DFjol/:2G4FiNmKj4cSt776EJBGHvbWmPFjo9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\ToolStripEx\obj\Release\ToolStripToolTip.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
TransText.dll
- IMPHASH 9871efef5eb5448f221bfe91c8e39a68
- SHA256 d5d2c0135b8ec8d50ac892628d448e3658ded1537045c6014e2548ef5da080fe
- MD5 b4319f12e51f297fd7cc414e2bad1070
- SHA1 7a29752a8c4ff040630875c287462d1ad20a0469
- SHA512 300686bc6819d448e9a819822729cd88a3ea808b1dc5d536d1e472547be924727c1a82bcc5e1757d9159f7c6ec146bfd946e1b5d5a998ccd2c460ed24bfb4ca4
- SSDEEP 1536:NIbG2g0r2q5sffQZCTxIN8WJ2E5WFF84fHVJ7vfnzTIljY2JV4KOmnxVXItc5ivN:NIC2pPspxg4ffSjY2JmKOmnzItc5ivN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65629
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord665
ord354
ord2805
ord942
ord533
ord6381
ord6867
ord654
ord341
ord3976
ord2855
ord2854
ord2914
ord1795
ord1809
ord1920
ord1857
ord1856
ord1850
ord1851
ord1937
ord4078
ord1834
ord2862
ord1789
ord1829
ord1792
ord1831
ord1890
ord1897
ord1826
ord3087
ord5624
ord1644
ord2455
ord909
ord1173
ord4180
ord394
ord696
ord3638
ord536
ord6770
ord812
ord6140
ord559
ord3312
ord3792
ord3798
ord3867
ord1808
ord4224
ord5462
ord1863
ord926
ord3805
ord2806
ord2822
ord4197
ord925
ord859
ord6136
ord924
ord922
ord6655
ord2776
ord6919
ord6921
ord6278
ord6279
ord6918
ord6640
ord2932
ord5886
ord2859
ord3871
ord6195
ord6920
ord6865
ord6868
ord860
ord4155
ord1137
ord1179
ord342
ord1248
ord1165
ord6379
ord5436
ord2099
ord2036
ord6390
ord5830
ord5446
ord2440
ord2836
ord3898
ord4199
ord537
ord941
ord940
ord1615
ord4183
ord912
ord1989
ord4272
ord798
ord823
ord3719
ord3506
ord3171
ord3178
ord3175
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord2912
ord2910
ord5568
ord4124
ord397
ord699
ord3658
ord5628
ord861
ord541
ord801
ord2756
ord913
ord6139
ord2810
ord6874
ord3434
ord6654
ord2755
ord5852
ord4184
ord2606
ord5590
ord858
ord535
ord700
ord825
ord540
ord398
ord800
ord538
msvcrt
??1type_info@@UAE@XZ
_onexit
__dllonexit
malloc
_initterm
fgets
fgetws
_CxxThrowException
_adjust_fdiv
_mbschr
isalnum
isspace
_wmakepath
_wsplitpath
isdigit
wcschr
iswupper
free
iswalnum
wcslen
wcsncpy
_purecall
strncpy
memset
memcpy
iswdigit
_wcsicmp
qsort
_wtoi
iswlower
towupper
towlower
wcscmp
__CxxFrameHandler
kernel32
LoadLibraryW
GetProcAddress
GetCurrentProcess
lstrlenW
lstrcmpiW
WideCharToMultiByte
lstrcpynW
lstrcpyW
GetLocaleInfoW
GetACP
GetUserDefaultLangID
MultiByteToWideChar
LCMapStringW
DeleteFileW
CloseHandle
SetFileAttributesW
GetFileAttributesW
GetCurrentDirectoryW
CreateDirectoryW
GetTempPathW
ExpandEnvironmentStringsW
GetModuleFileNameW
lstrcmpW
GetCurrentThreadId
MulDiv
user32
GetTabbedTextExtentW
SetMenuItemInfoW
GetMenuStringW
RegisterClipboardFormatW
MapVirtualKeyW
GetKeyNameTextW
GetMenu
IsWindow
GetMenuItemInfoW
GetClassNameW
CallNextHookEx
UnhookWindowsHookEx
GetWindowLongW
GetDC
GetSystemMetrics
SetWindowsHookExW
GetWindow
IsMenu
GetSubMenu
SendMessageW
GetMenuItemCount
GetMenuItemID
GetParent
RegisterWindowMessageW
GetDlgCtrlID
ReleaseDC
SetWindowLongW
PostMessageW
CallWindowProcW
gdi32
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
advapi32
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathW
shlwapi
PathCanonicalizeW
PathIsRelativeW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
CreateTransTextInterface
GetInterfaceVersion
Name
.text
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=34, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=584, id=1, productName=Unmarked objects,
count=3, id=4, version=9782,
count=38, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TreeViewHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 89d2aad60b130acc161bfb7bc56fe305d1912624073b86c44c17db8421fad331
- MD5 276fd072fcffeb077b8298d1ee4225bc
- SHA1 3299d119504b13f8db3da961a152eec8cb968533
- SHA512 87ac969cf9ad31bb5e80e0f0af7821e8e81631cb39d590533bbecd9578c8d0e7270234793033c58f94154c8c9cf58ee8fe97a6a3d9fac31461fb5ac3f0b90c49
- SSDEEP 96:4YsgwaaYX1FYVzNKXGulS2qvf+ioz0ViZx1imn5tki:4J1apCVIh8J+90VQxQmn5t1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\TreeViewHelper\obj\Release\TreeViewHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UIComponents.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7689cc7b39b75077e72a66ab12e5ef36705e89281e59c1df83b09d8825109e1
- MD5 d4413fbf03ba9765ea5fbe855c0d7aee
- SHA1 8a490047f459dee8355708c2f735a34390856205
- SHA512 aed39f41a39c28401a8e3a4367d374fccff556bdc983c755d9628b589a59d0c85482487721a6be36f0189fc73741a7dc8cec1e0bb09e36ee8b10d865685efeb3
- SSDEEP 48:63uGGSGVjHQk1/YlFkai/ppk31my4x8DkEBwVNMDfz9zjHSL3m2VKVFi7l6h+jdO:iujHL1/Yg41zu8Dk5A9zjHimqKXcbn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\UIComponents\obj\Release\UIComponents.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WebBrowserEx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0a8cf4f0d246b98d6c13062f4a500984762f5677ad40457fe18728d5adf070c
- MD5 01de2a30b49a3509e4752ca1721d56a0
- SHA1 40bf57ea7febdf6834b056c974035583129d66fe
- SHA512 3ea5c28c26d1e6e6b66aba0cd5e0200d94b3c8391cd609222520d7c3904ac54a9bba409036b075b9de1cca83732100b14ad1176f4ef96b4243ce9ca2d8729dd2
- SSDEEP 384:D9weGWf+t1jGgG2H1qjMPP9UAqo7trDOru54Lk6+G2M:DkWf+LjxFiX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\WebBrowserEx\obj\Release\WebBrowserEx.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WordCloudUIExtensionBridge.dll
- IMPHASH d59cb0807befe220603cdb116418961f
- SHA256 e72c548bb60dafeb80a6ccbef2f4f9dc176aa4f8cac26c3ea1a3957d99d33cb3
- MD5 0372038ddc288490465811091f7d69bd
- SHA1 3f85fe573234a1b2d2a103a2ad96cc1e3a1a9a30
- SHA512 cafc69cfbe38162ab32343b1dce176c81c20b291f3f057c0e3d104a899e3ffa851b85924d766073aeed084d055e05bbca8f717e216932124564d13f23944b14e
- SSDEEP 1536:ZZoOTakK1QGuryX3XhAbXgY2S2YMU7ka:s1PV6bXgYLMU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\Release\WordCloudUIExtensionBridge.pdb
vcruntime140
__FrameUnwindFilter
_except_handler4_common
memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
kernel32
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
LoadLibraryW
Sleep
user32
RegisterWindowMessageW
MoveWindow
SetWindowLongW
SetParent
LoadImageW
mscoree
_CorDllMain
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
712B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=24123,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=21, id=261, version=24123,
count=11, id=260, version=24123,
count=4, id=203, version=65501,
count=47, id=1, productName=Unmarked objects,
count=4, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
WordCloudUIExtensionCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 516768af8be0289961807b2804d0d56514b06e5b8ea8eae9738b675228c75e7e
- MD5 c359de1c9c69bbebe7450131ef855206
- SHA1 e47612139d1f6337eb1ba33891e97f50d1fda83e
- SHA512 811d3f7669972e4d3f29ea872e3f14102812dcd31f9dd61c6d14ca7367b696091c6bd197db8ee57438ec82833be9a821ed9db4a7a207fb55de2f1ae4bc52000c
- SSDEEP 1536:p03V2MEMpaxtNH+ssER/rk8P4XavIdMTuLMB5ap:1MEMpawK/5BALp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\UIExension\WordCloudUIExtension\WordCloudUIExtensionCore\obj\Release\WordCloudUIExtensionCore.pdb
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WorkloadExt.dll
- IMPHASH 23af479e31f11fb03dd4928b19d8773d
- SHA256 12fd98c6646b03caec8543c690cba00a00ad26065aafcb1b527b3add41d7fff6
- MD5 4c9184ae05968eb6d5dddab9d12fa482
- SHA1 abaef46e5ce6636188366e3d7fae24be384b93ca
- SHA512 adfe3636e51f82346236b9bc7b736f97d6954a464c0f3b0335919528014f494ec3b79d9eb7ca53391ec2e07f513ef7a525791e2bcbda81dde470ef91a9800fad
- SSDEEP 6144:82/Akxc1Ud3288r8oH6Pr0n8rCYXTLwk31aaFUGVhRgu/g1jpQkgUhS0XSXX:82okCEm8k8+WmIZ13UngiEXX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
320087
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord4970
ord4942
ord4352
ord4371
ord5283
ord4829
ord6136
ord2293
ord5886
ord6330
ord942
ord4848
ord2053
ord2634
ord6874
ord922
ord924
ord937
ord933
ord3898
ord2440
ord5830
ord2036
ord3568
ord3621
ord2406
ord6631
ord4803
ord5945
ord2078
ord925
ord836
ord4118
ord6597
ord3566
ord6617
ord3087
ord4470
ord5949
ord2606
ord920
ord3688
ord818
ord4270
ord755
ord470
ord2644
ord2444
ord1662
ord3494
ord2507
ord355
ord3687
ord5180
ord816
ord665
ord354
ord562
ord3614
ord4128
ord4292
ord5784
ord6166
ord1257
ord1560
ord268
ord4272
ord5568
ord2910
ord1263
ord1229
ord1165
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6168
ord5869
ord5790
ord5674
ord5732
ord5575
ord5567
ord6057
ord5860
ord3591
ord6017
ord6190
ord2559
ord3133
ord5977
ord860
ord6195
ord4018
ord6871
ord6115
ord4688
ord5142
ord6211
ord4078
ord1794
ord2072
ord2081
ord1197
ord3871
ord3084
ord2755
ord940
ord4124
ord2756
ord6920
ord6279
ord6278
ord6921
ord6919
ord4273
ord6654
ord6655
ord859
ord5604
ord5854
ord6868
ord927
ord4199
ord4197
ord2822
ord913
ord4184
ord1840
ord556
ord809
ord4238
ord2706
ord6238
ord6896
ord2114
ord1088
ord3905
ord3281
ord6451
ord6316
ord4155
ord5783
ord2088
ord472
ord3291
ord1933
ord3393
ord3728
ord686
ord810
ord384
ord4266
ord6193
ord3915
ord4500
ord6437
ord2085
ord2115
ord3016
ord4120
ord2751
ord5624
ord1644
ord2455
ord2862
ord909
ord1173
ord4180
ord394
ord696
ord3638
ord939
ord935
ord3049
ord6664
ord834
ord3875
ord3420
ord3050
ord926
ord3051
ord929
ord919
ord4215
ord2576
ord3649
ord5706
ord3284
ord4158
ord807
ord554
ord2430
ord1637
ord2572
ord4394
ord3625
ord682
ord6712
ord6900
ord3292
ord3995
ord6004
ord3285
ord3577
ord5267
ord2350
ord4736
ord1930
ord3798
ord5858
ord6140
ord3867
ord3747
ord2567
ord4390
ord3569
ord2070
ord768
ord489
ord1899
ord4253
ord4472
ord1808
ord700
ord398
ord5628
ord1761
ord4638
ord1764
ord6362
ord2405
ord2016
ord4212
ord2568
ord4391
ord3347
ord3572
ord692
ord4220
ord2932
ord2400
ord5259
ord4055
ord5263
ord1712
ord4752
ord1772
ord4042
ord1941
ord6504
ord6758
ord6911
ord5880
ord2916
ord2004
ord6266
ord2858
ord5867
ord6174
ord291
ord3290
ord6150
ord2522
ord4360
ord4051
ord5467
ord4116
ord2381
ord1703
ord1708
ord5230
ord6365
ord5275
ord5058
ord5244
ord2436
ord3725
ord559
ord812
ord4263
ord6142
ord5080
ord6456
ord1126
ord4491
ord2144
ord3629
ord1635
ord2445
ord1821
ord3605
ord656
ord1932
ord4265
ord6375
ord4109
ord5599
ord397
ord699
ord1792
ord609
ord2423
ord3706
ord783
ord2104
ord6124
ord4428
ord4369
ord4846
ord2505
ord293
ord4222
ord3740
ord5917
ord6736
ord6516
ord6708
ord6607
ord4224
ord4418
ord3397
ord5286
ord4392
ord1768
ord6051
ord2570
ord4899
ord5154
ord5156
ord5155
ord1143
ord3948
ord561
ord815
ord3733
ord4616
ord3396
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord1863
ord1137
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord4213
ord2015
ord2403
ord4396
ord4704
ord535
ord6898
ord4229
ord2294
ord2362
ord825
ord324
ord540
ord858
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord6466
ord2099
ord6379
ord5436
ord2836
ord6390
ord5446
ord2745
ord5929
ord3792
ord5785
ord3749
ord941
ord6754
ord3909
ord3288
ord2854
ord2855
ord2746
ord2857
ord2859
ord2372
ord5871
ord4294
ord3991
ord3282
ord3993
ord6003
ord3805
ord5857
ord3983
ord341
ord654
ord3298
ord538
ord2092
ord4282
ord693
ord3635
ord3365
ord2574
ord3658
ord2810
ord2371
ord4279
ord289
ord323
ord1633
ord1634
ord5781
ord640
ord613
ord3737
ord6139
ord3312
ord3296
ord823
ord537
ord567
ord541
ord2057
ord616
ord801
ord861
ord641
ord800
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
msvcrt
free
malloc
wcsncpy
iswdigit
_wcsnicmp
wcsncmp
_wtoi
wcstod
_wsplitpath
setlocale
towupper
towlower
iswupper
iswlower
memmove
swprintf
_wtol
_wmakepath
_wcsdup
_wcsicmp
_strdup
_CIfmod
memcpy
qsort
memset
wcscmp
_purecall
_ftol
__CxxFrameHandler
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_CxxThrowException
kernel32
lstrcmpiW
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
GetModuleFileNameW
GetFileAttributesW
lstrcpynW
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentThread
GetACP
lstrcpyW
LCMapStringW
GetLocaleInfoW
lstrlenW
GetLastError
LocalFree
GetCurrentProcess
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalReAlloc
GlobalFree
MulDiv
VirtualQuery
InterlockedCompareExchange
VirtualProtect
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
DebugBreak
VirtualAlloc
SetLastError
LocalAlloc
user32
IntersectRect
EqualRect
IsWindowVisible
GetWindowRect
IsRectEmpty
GrayStringW
DrawTextW
TabbedTextOutW
GetKeyState
ReleaseCapture
SetCapture
PtInRect
DrawFrameControl
DrawFocusRect
GetClassInfoW
DefWindowProcW
LoadCursorW
InflateRect
SetRectEmpty
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetLastActivePopup
ReleaseDC
GetFocus
SetWindowLongW
LoadIconW
OffsetRect
ChildWindowFromPoint
UpdateWindow
ScreenToClient
GetMessagePos
PostMessageW
GetClipboardData
GetParent
LockWindowUpdate
IsWindow
GetClientRect
InvalidateRect
SendMessageW
GetSysColor
EnableWindow
GetSystemMetrics
RegisterWindowMessageW
GetForegroundWindow
MapDialogRect
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowDC
IsWindowEnabled
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenuDefaultItem
RedrawWindow
SetParent
DestroyIcon
RegisterClipboardFormatW
GetNextDlgTabItem
IsChild
GetWindow
GetDlgItem
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetRect
CopyIcon
LoadMenuW
GetClassNameW
CopyRect
GetCursor
GetCapture
CallWindowProcW
UnionRect
GetScrollRange
ShowWindow
GetScrollInfo
SubtractRect
GetCursorPos
GetDlgCtrlID
ClientToScreen
DragDetect
MoveWindow
SetFocus
SetScrollPos
ScrollWindowEx
GetScrollPos
KillTimer
SetTimer
LoadBitmapW
GetDesktopWindow
DrawIconEx
GetIconInfo
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
WindowFromDC
DrawTextA
SetCursor
LoadImageW
ShowScrollBar
SetWindowPos
GetWindowLongW
MapVirtualKeyW
GetKeyNameTextW
SystemParametersInfoW
GetDC
gdi32
Polyline
SetDIBits
GetWindowOrgEx
GetBkColor
RoundRect
GetTextMetricsW
CreateFontIndirectW
DeleteObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Polygon
Rectangle
GetStockObject
GetObjectW
SelectPalette
RealizePalette
GetDIBits
CreatePen
CreateFontW
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
CreateSolidBrush
BitBlt
SelectObject
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ExtractIconExW
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_Create
_TrackMouseEvent
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragLeave
ImageList_EndDrag
olepro32
ord252
msimg32
GradientFill
shlwapi
PathCanonicalizeW
CreateUIExtensionInterface
GetInterfaceVersion
Name
.text
Size
344KB
Virtual Size
341KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=43, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=3, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=971, id=1, productName=Unmarked objects,
count=93, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
iCalImportExport.dll
- IMPHASH d2d8f5a7560d2e9b5b079a932fc8fa5e
- SHA256 6edeeb6001304ed71e3bf4c0422e03a72660bd0a46865c36b479b37bad3362a6
- MD5 0b022e09e733dbeef436901906202d28
- SHA1 38baf4bffcfb1ef79334459a6f9ded13a9326bfe
- SHA512 0487f7b66d231cc99199e5fbacd5801c6ab126cee188888af08e028984c78ab9f1e766f4e761378fdcd26173c1939235bcc4c3d7dbea7e04cd5bbb18a9c0403d
- SSDEEP 768:K4lQuAcWMMQwGbu+N8iXu9MdfOMRzqsqXQ+4wbFBeBpOt3:Zytrp4lXu9MdfOMRPqXQ+4SBezu3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3948
ord3396
ord4616
ord4418
ord3733
ord561
ord815
ord836
ord834
ord3805
ord3050
ord941
ord2606
ord5568
ord2910
ord537
ord929
ord919
ord2755
ord6921
ord6919
ord924
ord859
ord4199
ord533
ord858
ord1165
ord2099
ord6379
ord2836
ord2914
ord5462
ord1863
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1115
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord3753
ord3403
ord3222
ord3049
ord3420
ord3875
ord6920
ord4197
ord2756
ord541
ord5857
ord801
ord937
ord540
ord6868
ord2810
ord535
ord6466
ord942
ord2506
ord538
ord800
ord798
ord3719
ord3506
ord3171
ord3178
ord3175
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord5436
ord6390
ord5446
ord6278
ord6655
ord940
ord5604
ord5929
ord6664
ord832
ord397
ord4183
ord912
ord925
ord922
ord699
ord823
ord6139
ord6874
ord3658
ord4229
ord2350
ord641
ord324
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord4704
ord4992
ord4847
ord4370
ord5261
ord1808
ord861
ord2822
ord6279
ord4124
ord4272
ord4177
ord6313
ord964
ord2800
ord1989
ord2912
ord6381
ord825
msvcrt
__CxxFrameHandler
qsort
_wtoi
wcscmp
mktime
swscanf
_purecall
memset
_ftol
wcsncpy
_wcsicmp
wcslen
free
wcschr
memcpy
_CxxThrowException
fgetws
fgets
_mbschr
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
kernel32
LocalAlloc
GetACP
MulDiv
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
LocalFree
GetLocaleInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
user32
LoadImageW
GetDC
EnableWindow
DestroyIcon
ReleaseDC
RegisterClipboardFormatW
gdi32
GetDeviceCaps
CreateExportInterface
CreateImportInterface
GetInterfaceVersion
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=19, version=8022,
count=33, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=511, id=1, productName=Unmarked objects,
count=34, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
iTextSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 787cc3ce50a7464710d04917d3fe69e51e300ac23b8d4424c03f4e55be107599
- MD5 76c287da754a64e43e1344c120959d11
- SHA1 7612db16c4c151d0b3952f6eea97c00572c3b197
- SHA512 72ae0e3016ebfb93db52b732ff26e1a66659139ed07cc708d9705e91ca6624a62f3a0aa84c04217b61883439453c578769b217874316eb39ef8bfc65db4f5473
- SSDEEP 24576:HzAbbTP0tUjCf66TTG+jJu9jEH3M5vCBjoFfBfnVHbkuih1WJfg+LoG:TATP32fVJu9jEH3qkE79Hovh1W5nLo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2615950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
todolist.exe.xp.manifest
- SHA256 d4f03f94952849278584f32bcd4ba2450fd381173ca53c906219c117750bca01
- MD5 b0e0b5ce0d3774ed8f3830d70d691967
- SHA1 ce57b75ae9de594e3c99eb9a8862d3525036f2a7
- SHA512 ea17540dbc098b61ddf87f3d7554a879beb34311d46757093fdb7075109ca32cb617e78690cfea2c5032454db86313b094a47197c241050ca1ce193cfbc102e9
- MD5 SHA1 SHA512
unvell.ReoGrid.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 231fd6c9a7e83fd36cca18325d9abda6bb923e62b74cd3a3f8a52de07b96d54e
- MD5 a0ed53347817d13a9c36e2ee64b4b901
- SHA1 9f412b3c4b6931e72beef9080bec5922b8065033
- SHA512 f65b8d5bf3aa7dfcdcac881b6ccfe173e015200e3a9108ad9565635bf9e55cf87082a2b244c571049cadfd4748b90bdfeb651ce7927bdeb0c52227e2cafc2b67
- SSDEEP 24576:eSVR+rfowlnqG8DS28BNghq452iLAqeLP30M:eS6V5v8nMs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1096846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\ReoGrid\obj\Release\unvell.ReoGrid.pdb
mscoree
_CorDllMain
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
unvell.ReoGridEditorControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae544a4ea234693398f73fef8915f0a894b2692f755358f58bcaba02cb5098bf
- MD5 3aaf6b12f9c78938263ec2c69492f3f2
- SHA1 b8bd9c7ca90645883cf9a3c452a577c0cdffdea3
- SHA512 45811c226225973a9169b94ebaf70383461edf7c51018c5f924a5d7094e486f8e24d639e43ff1bea427366dd0d308e81401ea15680eb7d70cc76277c076df728
- SSDEEP 6144:fe0wARLMJEDPdB5sK5RYmcOkHZBlT/rDiMALlDp4BSub+WRy93YopZzY:fwEdBX5RVcjBbmUbtRQlpq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
425290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_code\ToDoList_8.3\Plugins\3rdParty\ReoGridEditorControl\obj\Release\unvell.ReoGridEditorControl.pdb
mscoree
_CorDllMain
Name
.text
Size
407KB
Virtual Size
407KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ